mirror of
https://github.com/rcourtman/Pulse.git
synced 2026-05-10 03:51:54 +00:00
Enhancements for OIDC authentication based on user feedback from issue #327: 1. Add OIDC logout URL support - New OIDC_LOGOUT_URL environment variable - UI field in OIDC settings panel for logout URL configuration - Properly redirects to IdP logout endpoint (e.g., Authentik end-session) - Stored in config and returned via security status API 2. Fix redirect URL help text in UI - Handle empty defaultRedirect string properly - Improved help text when PUBLIC_URL is not set - Clarify when auto-detection vs manual config is needed 3. Documentation improvements - Add note about using https:// in PUBLIC_URL/OIDC_REDIRECT_URL when behind TLS proxy - Document OIDC_LOGOUT_URL environment variable - Clarify X-Forwarded-Proto header behavior in OIDC docs - Add better guidance for Authentik users on HTTPS setup 4. Frontend improvements - Add HS256 signature algorithm error message in Login component - Display OIDC logout URL when available These changes address the remaining OIDC UX issues reported by users, particularly around logout functionality and reverse proxy configuration. 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| alerts.go | ||
| auth.go | ||
| config_handlers.go | ||
| csrf_store.go | ||
| demo_middleware.go | ||
| diagnostics.go | ||
| DO_NOT_EDIT_FRONTEND_HERE.md | ||
| frontend_embed.go | ||
| guest_metadata.go | ||
| middleware.go | ||
| notifications.go | ||
| oidc_handlers.go | ||
| oidc_service.go | ||
| rate_limit_config.go | ||
| ratelimit.go | ||
| README.md | ||
| recovery_tokens.go | ||
| router.go | ||
| security.go | ||
| security_oidc.go | ||
| security_setup_fix.go | ||
| session_store.go | ||
| settings.go | ||
| system_settings.go | ||
| types.go | ||
| updates.go | ||
Internal API Package
This directory contains the API server implementation for Pulse.
Important Note About frontend-modern/
The frontend-modern/ subdirectory that appears here is:
- AUTO-GENERATED during builds
- NOT the source code - just a build artifact
- IN .gitignore - never committed
- REQUIRED BY GO - The embed directive needs it here
Frontend Development Location
👉 Edit frontend files at: /opt/pulse/frontend-modern/src/
Why This Structure?
Go's //go:embed directive has limitations:
- Cannot use
../paths to access parent directories - Cannot follow symbolic links
- Must embed files within the Go module
This is a known Go limitation and our structure works around it.