stwaidele/dorfteich

M27 — VS-NfD: external authentication

New Issue

OIDC (Authorization Code + PKCE) against the existing UserIdentity.provider slot, proxy-header/mTLS as the alternative path, and a hard auth.local.enabled=false switch including every token flow. Delegates the authentication base function to the operator's platform (ADR 0019/0021).

No due date

100% Completed

[VS-NfD] Map IdP groups and roles onto the permission model

#217 by fable-5 was closed 2026-07-31 13:47:17 +02:00 0 / 6

[VS-NfD] Add a hard auth.local.enabled = false switch covering every local credential flow

#216 by fable-5 was closed 2026-07-31 13:47:16 +02:00 0 / 6

[VS-NfD] Support a trusted reverse-proxy header or mTLS client certificate as an alternative path

#215 by fable-5 was closed 2026-07-31 13:47:16 +02:00 0 / 5

[VS-NfD] Implement OIDC Authorization Code with PKCE, Keycloak as reference IdP

#214 by fable-5 was closed 2026-07-31 13:47:15 +02:00 0 / 6