NHAS
NHAS
Howdy was just noting this as I was just able to replicate it. I am currently working on a new docs site that gives better documentation, unfortunately I just dont...
Hi again Chris, thanks for another excellent issue. I think this may actually be two issues in one. First being "can we make preferred_username configurable" which is a definite yes,...
I've been meaning to make device registration SSO enabled for sometime actually. So it could be quite nice to have it that on first registration it creates the association. Just...
Ah I am incredibly dumb and forgot that I'd implemented this: This is in the oidc provider, you can configure it via the administrative UI under settings. ```go deviceUsername :=...
Ah yes, it does. I've just left it being configurable in the administrative UI rather than adding it to the json file. Apologies!
I've just updated my comments to be less incorrect haha
Finally getting back around to this. I'll be using the `sub` (or subject) data thats given in the user info as its immutable by spec.
My solution to the security portion of this issue is just to store and check the Idp provided subject. So its probably no the best solution. But it is the...
Hi there, To take a stab in the dark I expect you've missed a trailing slash: `https://domain.com/authorise/oidc?code=XXXXX` should be `https://domain.com/authorise/oidc/?code=XXXXX`
That looks like you haven't configured the new allowed url redirection in your azure tenancy with the new end slash.