Skip to content

[19.0][MIG] auth_oidc: Migration to 19.0#843

Merged
OCA-git-bot merged 46 commits intoOCA:19.0from
ap-wtioit:19.0-mig-auth_oidc
Feb 5, 2026
Merged

[19.0][MIG] auth_oidc: Migration to 19.0#843
OCA-git-bot merged 46 commits intoOCA:19.0from
ap-wtioit:19.0-mig-auth_oidc

Conversation

@ap-wtioit
Copy link
Copy Markdown
Contributor

@ap-wtioit ap-wtioit commented Oct 1, 2025

Migration of auth_oidc to 19.0

Info @wt-io-it

andreschenkels and others added 30 commits October 1, 2025 13:08
@andreschenkels @ap-wtioit
[ADD] auth_oidc module
a169182
@gurneyalex @ap-wtioit
Adapt to OCA standards
25c81d4 
update manifest, add README, update requirements.txt
@sbidoul @ap-wtioit
auth_oidc: improve docs
4d337ff 
Add some install instructions and configuration instructions
for keycloak.
@sbidoul @ap-wtioit
[MIG] auth_oidc: update dotfiles
876a8a8
@sbidoul @ap-wtioit
[MIG] auth_oidc from 10.0
0288419
@sbidoul @ap-wtioit
auth_oidc: simplify and use "id_token token"
de79055 
Avoid replacing the access token by the id token.
This may cause confusion.
Copy a little piece of code from auth_oauth() method,
to make the code easier to follow, and prepare for
implementing the authorization code flow.
@sbidoul @ap-wtioit
auth_oidc: _get_key and _map_token_values are not model methods
6e58782
@sbidoul @ap-wtioit
auth_oidc: cache _get_key
2bf19a6
@sbidoul @ap-wtioit
auth_oidc: add authorization code flow
755895a
@sbidoul @ap-wtioit
auth_oidc: separate field for jwks uri
bc5ce0f
@sbidoul @ap-wtioit
auth_oidc: additional error logging
5517ff2
@sbidoul @ap-wtioit
auth_oidc: add author and maintainer
d0ec070
@sbidoul @ap-wtioit
auth_oidc: improve docs, mention implicit flow is not recommended
1f074ec
@sbidoul @ap-wtioit
auth_oidc: better nonce
68dcb6e
@sbidoul @ap-wtioit
auth_oidc: make client secret optional
16a4fd7 
This is not a recommended scenario, but this prepares
the code for using PKCE
@sbidoul @ap-wtioit
auth_oidc: add PKCE support
0590e0b
@sbidoul @ap-wtioit
auth_oidc: demo data and basic test
b7bbd3c
@sbidoul @ap-wtioit
auth_oidc: slightly more robust parsing of claim mapping
952d6a7
@sbidoul @ap-wtioit
auth_oidc: split long method
677f173
@oca-travis @ap-wtioit
[UPD] Update auth_oidc.pot
e028d28
@chafique-delli @ap-wtioit
[MIG] auth_oidc: Migration to 14.0
f6ae2a4
@paradoxxxzero @ap-wtioit
[FIX] auth_oidc: Fix werkzeug deprecated warning for url_encode, url …
0bb0e1e 
…decode
@theangryangel @ap-wtioit
[MIG] auth_oidc: Migration to 15.0
dc8f451
@ap-wtioit
[16.0][MIG] auth_oidc: Migration to 16.0
fe89a44
@ap-wtioit
[IMP] add AzureAD code flow provider
796868c
@Ivorra78 @ap-wtioit
Added translation using Weblate (Spanish)
7c347b1
@sbidoul @ap-wtioit
[DOC] auth_oidc: fix images and convert to md
e14fe2b
@mymage @ap-wtioit
Added translation using Weblate (Italian)
74893eb
@ap-wtioit
[FIX] auth_oidc: set user_id for auth_oauth
e3949ec 
inspired by OCA#336
@ap-wtioit
[FIX] auth_oidc: support keys without kid
621b422 
create an upstream merge request after
OCA#393 is merged
@ap-wtioit ap-wtioit mentioned this pull request Oct 1, 2025
Open
19 tasks
@pedrobaeza
Copy link
Copy Markdown
Member

pedrobaeza commented Oct 1, 2025

/ocabot migration auth_oidc

@OCA-git-bot OCA-git-bot added this to the 19.0 milestone Oct 1, 2025
@ap-wtioit
Copy link
Copy Markdown
Contributor Author

ap-wtioit commented Oct 1, 2025 •
edited
Loading

Tests are failing because of demo data no longer loaded by default (they still are in our doodba). Will split up the demo keycloak client data and test client data.

Edit: test data is now separated from demo data

@ap-wtioit ap-wtioit force-pushed the 19.0-mig-auth_oidc branch 2 times, most recently from 11b5217 to a5830da Compare October 1, 2025 12:59
@OCA-git-bot
Copy link
Copy Markdown
Contributor

OCA-git-bot commented Oct 14, 2025

This PR has the approved label and has been created more than 5 days ago. It should therefore be ready to merge by a maintainer (or a PSC member if the concerned addon has no declared maintainer). 🤖

@KirolosMFahem
Copy link
Copy Markdown

KirolosMFahem commented Nov 13, 2025

This PR has the approved label and has been created more than 5 days ago. It should therefore be ready to merge by a maintainer (or a PSC member if the concerned addon has no declared maintainer). 🤖

@sbidoul

@BT-sschmid
Copy link
Copy Markdown

BT-sschmid commented Feb 4, 2026

@sbidoul could you merge this?

@sbidoul
Copy link
Copy Markdown
Member

sbidoul commented Feb 5, 2026

/ocabot merge nobump

@OCA-git-bot
Copy link
Copy Markdown
Contributor

OCA-git-bot commented Feb 5, 2026

Hey, thanks for contributing! Proceeding to merge this for you.
Prepared branch 19.0-ocabot-merge-pr-843-by-sbidoul-bump-nobump, awaiting test results.

@OCA-git-bot OCA-git-bot merged commit e53f471 into OCA:19.0 Feb 5, 2026
6 of 7 checks passed
@OCA-git-bot
Copy link
Copy Markdown
Contributor

OCA-git-bot commented Feb 5, 2026

Congratulations, your PR was merged at e3446bc. Thanks a lot for contributing to OCA. ❤️

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@sbidoul sbidoul sbidoul approved these changes

+2 more reviewers

@wtaferner wtaferner wtaferner approved these changes

@KirolosMFahem KirolosMFahem KirolosMFahem approved these changes

Reviewers whose approvals may not affect merge requirements

Assignees

No one assigned

Labels

approved merged 🎉 ready to merge

Projects

None yet

Milestone

19.0

Development

Successfully merging this pull request may close these issues.