Yorick van Pelt
555a3dbb95
Switch from email-based OIDC matching to the stable `sub` claim. Existing users are migrated by email on first login, new users are auto-enrolled from OIDC claims, and admin status is synced from the IdP's groups claim. Also expose oidc_sub on the admin edit-user page. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
3 lines
104 B
SQL
3 lines
104 B
SQL
ALTER TABLE users ADD COLUMN oidc_sub TEXT;
|
|
CREATE UNIQUE INDEX idx_users_oidc_sub ON users (oidc_sub);
|