Anso 6890224903 fix(sso): harden Custom OIDC provider and SSO configuration (#630) ...

- Add Host header injection validation for OAuth callback URL derivation
  when SSO_CALLBACK_URL is not set (extracted into shared getSSOBaseUrl helper)
- Add startup warning when OIDC providers are enabled without SSO_CALLBACK_URL
- Add diagnostic logging for claim fallback, email changes on re-login,
  and admin seat limit enforcement (gated behind Developer Mode)
- Add Custom OIDC environment variables to .env.example
- Fix stale AdmiralGate comment in SSOSection.tsx
- Fix .env.example section header referencing removed Admiral tier gate
- Fix docs: correct Custom OIDC display name default, replace nonexistent
  DEBUG=true env var reference with Developer Mode toggle
- Add tests for role enforcement (viewer 403), API token scope denial,
  OIDC claim edge cases, Custom OIDC test connection, callback error params
- Refresh SSO settings screenshots

2026-04-16 08:10:28 -04:00

..

sso-settings-custom-oidc.png

fix(sso): harden Custom OIDC provider and SSO configuration (#630)

2026-04-16 08:10:28 -04:00

sso-settings-ldap.png

fix(sso): harden Custom OIDC provider and SSO configuration (#630)

2026-04-16 08:10:28 -04:00

sso-settings-oidc.png

fix(sso): harden Custom OIDC provider and SSO configuration (#630)

2026-04-16 08:10:28 -04:00

sso-settings.png

fix(sso): harden Custom OIDC provider and SSO configuration (#630)

2026-04-16 08:10:28 -04:00