Go to file

Yorick van Pelt 555a3dbb95 Match OIDC users by sub claim, auto-enroll, sync admin from groups

Switch from email-based OIDC matching to the stable `sub` claim.
Existing users are migrated by email on first login, new users are
auto-enrolled from OIDC claims, and admin status is synced from the
IdP's groups claim. Also expose oidc_sub on the admin edit-user page.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-02-15 19:58:58 +01:00

controllers

Match OIDC users by sub claim, auto-enroll, sync admin from groups

2026-02-15 19:58:58 +01:00

migrations

Match OIDC users by sub claim, auto-enroll, sync admin from groups

2026-02-15 19:58:58 +01:00

models

Match OIDC users by sub claim, auto-enroll, sync admin from groups

2026-02-15 19:58:58 +01:00

public

Fix pinch-to-zoom being misinterpreted as swipe navigation

2026-02-14 15:48:22 +01:00

templates

Add OIDC login support for external identity providers

2026-02-14 16:08:45 +01:00

.gitattributes

Initial commit.

2017-11-09 17:00:22 +01:00

.gitignore

Initial commit.

2017-11-09 17:00:22 +01:00

app.php

Add SQLite support as alternative database backend

2026-02-14 15:23:41 +01:00

composer.json

Add OIDC login support for external identity providers

2026-02-14 16:08:45 +01:00

config.php.dist

Match OIDC users by sub claim, auto-enroll, sync admin from groups

2026-02-15 19:58:58 +01:00

flake.lock

Add Nix flake for dev environment

2026-02-14 15:23:45 +01:00

flake.nix

Add Nix flake for dev environment

2026-02-14 15:23:45 +01:00

LICENSE.md

Add BSD 3-clause license.

2020-12-30 13:55:30 +01:00

README.md

Add a readme file to the repo.

2020-12-30 13:55:16 +01:00

schema.sqlite.sql

Match OIDC users by sub claim, auto-enroll, sync admin from groups

2026-02-15 19:58:58 +01:00

seed.php

Add SQLite support as alternative database backend

2026-02-14 15:23:41 +01:00

server

Process login_url properly.

2017-11-09 17:00:35 +01:00

TODO.md

Implement basic tag management.

2017-11-09 17:00:36 +01:00

README.md

HashRU Pics

This is the development repository for the HashRU photo website. The CMS and its modules originate in Kabuki CMS, but have been extended and are maintained separately in this repository.

Requirements

The Kabuki codebase requires the following PHP extensions to be enabled for full operation:

exif
imagick (PECL)
mysqli

Setup

Copy config.php.dist to config.php and set-up the constants contained in the file.

Running

For development purposes, simply run the server script provided in the root of this repository. This will start a PHP development server on hashru.local:8080.

For a production environment, please set up a proper PHP-FPM environment instead.

Contributing

Pull requests are welcome over at the HashRU Gitea.

License

The HashRU Pics repository is licensed with a BSD 3-clause license, as is Kabuki CMS.