eblume/hephaestus
1
0
Fork 0
generated from eblume/project-template
Code Issues Pull requests Projects Releases 10 Packages Wiki Activity Actions
hephaestus/docs/changelog.d/heph-pwa-oidc-login.feature.md
Erich Blume a0be0f1085 doc(heph-pwa): in-app Authentik login replaces manual token paste 
Document the PKCE 'Login with Authentik' flow, the hub /config zero-config
discovery, and the redirect-URI prerequisite on the Authentik heph provider.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-06-05 07:09:42 -07:00

554 B
Raw Blame History

heph-pwa: added a Login with Authentik button — a proper browser OIDC sign-in (Authorization Code + PKCE) that replaces the manual bearer-token paste. The hub exposes an unauthenticated GET /config ({issuer, client_id}) so the app is zero-config when served from the hub; the PWA discovers the IdP endpoints, runs the PKCE redirect, exchanges the code for a token, and silently refreshes it (offline_access). The manual token field remains as a fallback. Requires the PWA origin registered as a redirect URI on the Authentik heph provider.