ShelfSSOOidc
Defined in: packages/auth/src/engine.ts:129
OIDC SSO connection (discovery-based, resolved by email domain).
Properties
Section titled “Properties”clientId
Section titled “clientId”clientId:
string
Defined in: packages/auth/src/engine.ts:135
OAuth client ID registered with the provider.
clientSecret?
Section titled “clientSecret?”
optionalclientSecret?:string
Defined in: packages/auth/src/engine.ts:137
OAuth client secret (omit for public clients).
discoveryUrl?
Section titled “discoveryUrl?”
optionaldiscoveryUrl?:string
Defined in: packages/auth/src/engine.ts:133
Discovery document URL. Defaults to issuer + /.well-known/openid-configuration.
issuer
Section titled “issuer”issuer:
string
Defined in: packages/auth/src/engine.ts:131
IdP issuer (e.g. the Keycloak realm URL).
optionalpkce?:boolean
Defined in: packages/auth/src/engine.ts:141
Use PKCE. Defaults to true.
scopes?
Section titled “scopes?”
optionalscopes?:string[]
Defined in: packages/auth/src/engine.ts:139
OAuth scopes. Defaults to ["openid", "email", "profile"].