feat(auth): support role sync on re-login

This commit is contained in:
Aarnav Tale
2026-06-22 16:39:25 -04:00
parent a3cd8444a3
commit 0439175e73
5 changed files with 45 additions and 8 deletions
+3 -2
View File
@@ -288,10 +288,11 @@ integration:
# # auditor, viewer, member. The owner role is only granted to the first user.
# default_role: "member"
#
# # Optional OIDC claim to read a Headplane role from when creating a new user.
# # Optional OIDC claim to read a Headplane role from when creating or syncing a user.
# # This can be a string claim, or an array claim containing one of the valid
# # roles above. If present and valid, it takes precedence over default_role.
# # Configure your IdP to map groups or client roles into this claim.
# # Configure your IdP to map groups or client roles into this claim. Existing
# # non-owner users are updated on their next OIDC sign-in when this claim changes.
# role_claim: "headplane_role"
#
# # Allow ID token verification with legacy RSA keys smaller than 2048 bits.