Matthieu MALVACHEandMatthieu MALVACHE
ec06b0c494
Add opt-in SSO authentication alongside Basic Auth. OAuth endpoints are auto-discovered via .well-known, with support for external IdPs (Keycloak, Authentik) via configurable OAUTH_ISSUER_URL. Sessions persist through httpOnly refresh token cookies with automatic renewal.
3 lines
99 B
TypeScript
3 lines
99 B
TypeScript
export const OAUTH_SCOPES = 'openid email profile';
|
|
export const REFRESH_TOKEN_COOKIE = 'jmap_rt';
|