Proxmox/pve-access-control
5
0
Fork 0
mirror of git://git.proxmox.com/git/pve-access-control.git synced 2025-02-08 05:57:30 +03:00
Code Releases Activity

openid: support configuring the prompt

Browse Source 
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
This commit is contained in:
Thomas Lamprecht 2021-11-18 14:53:44 +01:00
parent 83f0ad5d8d
commit 348c703875
2 changed files with 9 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
src/PVE/API2/OpenId.pm
View File

@ -36,6 +36,7 @@ my $lookup_openid_auth = sub {
client_id => $config->{'client-id'}, client_id => $config->{'client-id'},
client_key => $config->{'client-key'}, client_key => $config->{'client-key'},
}; };
$openid_config->{prompt} = $config->{'prompt'} if defined($config->{'prompt'});
my $openid = PVE::RS::OpenId->discover($openid_config, $redirect_url); my $openid = PVE::RS::OpenId->discover($openid_config, $redirect_url);
return ($config, $openid); return ($config, $openid);

8
src/PVE/Auth/OpenId.pm
View File

@ -42,6 +42,13 @@ sub properties {
type => 'string', type => 'string',
optional => 1, optional => 1,
}, },
prompt => {
description => "Specifies whether the Authorization Server prompts the End-User for"
." reauthentication and consent.",
type => 'string',
pattern => '(?:none|login|consent|select_account|\S+)', # \S+ is the extension variant
optional => 1,
},
}; };
} }
@ -52,6 +59,7 @@ sub options {
"client-key" => { optional => 1 }, "client-key" => { optional => 1 },
autocreate => { optional => 1 }, autocreate => { optional => 1 },
"username-claim" => { optional => 1, fixed => 1 }, "username-claim" => { optional => 1, fixed => 1 },
prompt => { optional => 1 },
default => { optional => 1 }, default => { optional => 1 },
comment => { optional => 1 }, comment => { optional => 1 },
}; };