Feat: Support OIDC

[57194]

Would be nice if Jelu supported OpenID Connect:

• https://openid.net/developers/how-connect-works/
• https://www.authelia.com/integration/openid-connect/introduction/
• https://www.microsoft.com/en-us/security/business/security-101/what-is-openid-connect-oidc
• https://auth0.com/intro-to-iam/what-is-openid-connect-oidc#!
• https://www.baeldung.com/spring-security-openid-connect
• https://spring.io/projects/spring-authorization-server
• https://docs.spring.io/spring-security/reference/servlet/oauth2/login/advanced.html
• https://curity.io/resources/learn/oidc-spring-boot/

[bayang]

somebody already had a similar request, can the process described in the following issue help you ? https://github.com/bayang/jelu/issues/64

[acidRain-burns]

Here for the same thing; #64 does not answer this for me, atleast. What I am after with a proper OpenID login is sometimes called a Social Login, using OIDC/OAuth. A good implementation was created for Komga as an example: https://komga.org/docs/installation/oauth2

[bayang]

Here for the same thing; #64 does not answer this for me, atleast. What I am after with a proper OpenID login is sometimes called a Social Login, using OIDC/OAuth. A good implementation was created for Komga as an example: https://komga.org/docs/installation/oauth2

ok this is clearer indeed. Thanks.

[andymarden]

+1

[bayang]

I'm not an oidc user myself, I tested with github and google. Seems ok. In production with github at least the redirect url generated by the code was in http and broke the redirect. I had to force the redirect uri in the config like this :

spring:
  security:
    oauth2:
      client:
        registration:
          github:
            client-id: id
            client-secret: secret
            scope: user:email
            redirect-uri: "https://your app full url here"

Otherwise seems ok. The code comes from komga anyway so if your config works there it should also work in jelu.

[acidRain-burns]

Awesome, There are other great features of OIDC that should be easy to add on too, but this is definitely just what I needed. Thank you so much!