Yuvi

Provide an API endpoint to get current effective traitlets configuration

8

When extending JupyterHub via services, it is quite difficult to figure out what exactly is the effective configuration of the hub. For example, there isn't a way to know what...

Upgrade non-admin parts of UI to Bootstrap 5

12

### Proposed change Currently, we are on Bootstrap 3, which is almost 10 years old. We should upgrade to Bootstrap 5! This issue is focused on bootstrap 5 for our...

If the hub config doesn't contain appropriate scopes to request from the provider, the token we retrieve may not have the key we are using as `username_claim`. This is the...

[Auth0] Allow redirecting to custom URL after logout

1

This can't be just done by setting logout_redirect_url unfortunately, as client_id is also required to be passed in here (see https://auth0.com/docs/authenticate/login/logout/redirect-users-after-logout). While that could be done via a callable, this...

Add `allowed_scopes` to all authenticators to allow some users based on granted scopes

28

We can already control what scopes we ask for by setting 'scope'. However, OAuth2 [states](https://datatracker.ietf.org/doc/html/rfc6749#section-3.3) that not all the scopes requested may be granted, for whatever reason. This could be...

Make username_claim callable in CILogon

1

Companion to https://github.com/jupyterhub/oauthenticator/pull/717 Fixes https://github.com/jupyterhub/oauthenticator/issues/712

[CILogon] Can not use `orcid` as `username_claim` directly, an option is needed

7

I am trying to use ORCID with CILogonOAuthenticator, with the following config ```yaml allowed_idps: http://orcid.org/oauth/authorize: username_derivation: username_claim: "oidc" allow_all: true ``` But unfortunately this produces usernames like `https://orcid.org/`, which aren't...

Remove ingress.https with unused kube-lego references, rely on ingress.tls and ingress.annotations

1

[kube-lego](https://github.com/jetstack/kube-lego) was the precursor to cert-manager, and has been dead for years and years now

Long term planning for the Frontend

27

Currently, we have one JS file + 1 HTML file (rendered with Jinja2) that does all the frontend work. This includes: 1. Client for the BinderHub API 2. Main page...

Bump alpine version used in Dockerfile

2

Brings us to latest alpine, and to a newer python