oidc

Overview ¶

Command oidc is a minimal server with OpenID Connect login (net/http), optionally enriched from the Keycloak Admin API: sessions in memory, a JSON API behind session.Guard.RequireAPI, a page behind RequireUI that starts the login, a route for one realm role, and logout at the IdP. Register <EXTERNAL_URL>/auth/oidc/sso/callback as redirect URI at the IdP. Replace the memory session backend with redisbackend before you run more than one replica.