feat(auth): pluggable OIDC provider (Keycloak / Entra / generic) - #175

Merged

hweej merged 5 commits into

mainfrom

feat/pluggable-oidc-provider

Aug 6, 2026

Commits on Aug 4, 2026

feat(auth): add provider presets + resolved OIDC settings (backward-compatible)
hweej
committed
7e0d152
feat(auth): add generic OidcClient (discovery + configurable role claims)
hweej
committed
de77344
refactor(auth): cut over to OidcClient (app.state.oidc); remove keycloak module
hweej
committed
aa0847d
docs(auth): document AUTH_PROVIDER + OIDC_* config with Entra example
hweej
committed
573a478
chore(auth): remove dead oidc_issuer_url alias; note Entra audience in .env.example
hweej
committed
24f2713