feat: add OIDC provider support #40
Merged
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
- Add OIDC provider implementation with configurable endpoints - Support for custom user ID field mapping using JSON pointer - Add comprehensive CLI flags and environment variables for OIDC configuration - Update README with OIDC setup instructions and configuration options - Include new GitHub Actions workflow for automated checks
Codecov Report❌ Patch coverage is
📢 Thoughts on this report? Let us know! |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Summary
This PR adds comprehensive OIDC (OpenID Connect) provider support to mcp-auth-proxy, enabling authentication with any OIDC-compliant identity provider such as Keycloak, Auth0, Azure AD, and others.
Type of Change
Related Issues
Changes Made
pkg/auth/oidc.goOIDC_CONFIGURATION_URL: OIDC discovery endpointOIDC_CLIENT_ID/OIDC_CLIENT_SECRET: OAuth credentialsOIDC_SCOPES: Configurable OAuth scopesOIDC_USER_ID_FIELD: JSON pointer to user identifier fieldOIDC_PROVIDER_NAME: Display name for providerOIDC_ALLOWED_USERS: Allowlist of authorized usersTesting
The implementation follows the same patterns as existing GitHub OAuth provider and includes proper error handling and validation.