towk/opaal
1
0
Fork 0
mirror of https://github.com/davidallendj/opaal.git synced 2025-12-20 21:27:07 -07:00
Code Issues Projects Releases Packages Wiki Activity Actions

Added docker compose and configs

Browse source
This commit is contained in:
David Allen 2024-02-25 02:36:04 -07:00
parent 37adc0e85c
commit 4f7ad29e0d
No known key found for this signature in database
GPG key ID: 1D2A29322FBB6FCB
7 changed files with 358 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

21
docker/oidc.jsonnet Normal file
View file

@ -0,0 +1,21 @@
local claims = {
email_verified: false
} + std.extVar('claims');
{
identity: {
traits: {
// Allowing unverified email addresses enables account
// enumeration attacks, especially if the value is used for
// e.g. verification or as a password login identifier.
//
// Therefore we only return the email if it (a) exists and (b) is marked verified
// by GitLab.
[if "email" in claims && claims.email_verified then "email" else null]: claims.email,
},
verified_addresses: std.prune([
// Carry over verified status from Social Sign-In provider.
if 'email' in claims && claims.email_verified then { via: 'email', value: claims.email },
]),
},
}