gsadmin/sencho
1
0
Fork 0
mirror of https://github.com/Studio-Saelix/sencho.git synced 2026-08-30 12:09:15 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix(sso): enforce hub-only SSO config when remote node is active (#1865)

Browse Source 
SSO configuration is control-plane state and must not follow the active
remote node. Add /api/sso/ to hub-only prefixes with case-insensitive
matching, hide the Settings section on remotes, and use localOnly on
every SSOSection fetch as defense in depth.
This commit is contained in:
Anso
2026-08-30 00:10:26 +00:00
committed by GitHub
parent 341511a2e0
commit c6d9fb98e5
9 changed files with 136 additions and 43 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/reference/settings.mdx
+4
View File
@@ -220,6 +220,10 @@ See [RBAC & User Management](/features/rbac) for details on what each role can a
Custom OIDC and the preset providers (Google, GitHub, Okta) are available on Community; LDAP / Active Directory requires Admiral.
</Note>
<Note>
SSO configuration is control-plane state and is not available while a remote node is selected.
</Note>
**Scope:** Global, admin-only
Configure Single Sign-On providers for centralized authentication. Each provider type has its own configuration card with connection fields, a test button, and an active toggle.