paulononato/backstage
1
0
Fork 0
Code Issues Pull Requests Actions 29 Packages Projects Releases Wiki Activity

Apply suggestions from code review

Browse Source 
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
This commit is contained in:
Patrik Oldsberg
2026-03-30 17:14:00 +02:00
committed by GitHub
parent 88296d5d33
commit bf1eb45609
1 changed files with 5 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/auth/oidc.md
+5 -4
View File
@@ -84,12 +84,13 @@ The OIDC provider **also** requires `auth.session.secret` to be set.
These parameters have implicit default values. Don't override them unless you know what you're doing.
- `authorizationUrl` and `tokenUrl`: Open the `metadataUrl` in a browser, that JSON will
hold these 2 URLs somewhere in there.
- `callbackUrl`: Override the default callback URL used by the OIDC provider.
- `timeout`: Override the default timeout for calls to the OIDC provider.
- `tokenEndpointAuthMethod`
- `tokenSignedResponseAlg`
- `scope`: Defaults to `openid profile email`. Override if your provider needs different
scopes.
- `additionalScopes`: Requests additional scopes on top of the default `openid profile
email` scopes. Do not configure `scope` directly, as the OIDC provider will reject
configurations that include it.
- `prompt`: Recommended to use `auto` so the browser will request sign-in to the identity
provider if the user has no active session.
- `sessionDuration`: Lifespan of the user session.