gotosocial/internal/api
Daenney 9cfb69f75d
[feature] Make OIDC admin groups configurable (#1555)
This removes the current default of checking for membership of the admin
or admins group and makes it required to explicitly configure which
groups should grant admin access, if any.

Relying on the implicit default of admin or admins is potentially
dangerous as that group may contain a different subset of people that we
may wish to grant admin access to GtS. This is probably not an issue for
a single-person instance, but for a community instance different admin
groups may exist in an OIDC provider for different applications.

I'm explicitly opting for not defaulting the value of oidc-admin-groups
to admin,admins because I think it's better for those things to be
explicitly configured.
2023-02-25 16:37:39 +00:00
..
activitypub [feature] Client API endpoints + v. basic web view for pinned posts (#1547) 2023-02-25 12:16:30 +00:00
auth [feature] Make OIDC admin groups configurable (#1555) 2023-02-25 16:37:39 +00:00
client [feature] Client API endpoints + v. basic web view for pinned posts (#1547) 2023-02-25 12:16:30 +00:00
fileserver [chore] Deinterface processor and subprocessors (#1501) 2023-02-22 16:05:26 +01:00
model [bugfix] Fix account roles (#1542) 2023-02-20 17:00:44 +01:00
nodeinfo [chore] Deinterface processor and subprocessors (#1501) 2023-02-22 16:05:26 +01:00
util [feature] Add a request ID and include it in logs (#1476) 2023-02-17 12:02:29 +01:00
wellknown [chore] Deinterface processor and subprocessors (#1501) 2023-02-22 16:05:26 +01:00
activitypub.go [chore] Deinterface processor and subprocessors (#1501) 2023-02-22 16:05:26 +01:00
auth.go [chore] Deinterface processor and subprocessors (#1501) 2023-02-22 16:05:26 +01:00
client.go [chore] Deinterface processor and subprocessors (#1501) 2023-02-22 16:05:26 +01:00
fileserver.go [chore] Deinterface processor and subprocessors (#1501) 2023-02-22 16:05:26 +01:00
nodeinfo.go [chore] Deinterface processor and subprocessors (#1501) 2023-02-22 16:05:26 +01:00
wellknown.go [chore] Deinterface processor and subprocessors (#1501) 2023-02-22 16:05:26 +01:00