Yorick van Pelt d631a07d3d Match OIDC users by sub claim, auto-enroll, sync admin from groups ...

Switch from email-based OIDC matching to the stable `sub` claim.
Existing users are migrated by email on first login, new users are
auto-enrolled from OIDC claims, and admin status is synced from the
IdP's groups claim. Also expose oidc_sub on the admin edit-user page.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-02-15 20:04:22 +01:00

6.1 KiB

Raw Permalink Blame History

View Raw