passport-gitlab2 icon indicating copy to clipboard operation
passport-gitlab2 copied to clipboard

Support /oauth/userinfo API (OpenID Connect)

Open Amejonah1200 opened this issue 9 months ago • 0 comments

One main problem with the /api/v4/user endpoint is that the permission needed is read_user which also gives permissions to read all users (/api/v4/users) also. This is kinda bad if the account doing the OAuth2 is an administrator account, because it is much more powerful.

Said differently: Support OIDC instead of "pure" OAuth2

Amejonah1200 avatar Mar 11 '25 14:03 Amejonah1200