public_git/bambuddy
1
0
Fork 0
mirror of https://github.com/maziggy/bambuddy.git synced 2026-10-09 07:25:44 +02:00
Code Issues Packages Projects Releases Wiki Activity

feat(oidc): Azure Entra ID support — configurable email claim & verification + Remember Me persistent login (#1126)

Browse Source 
feat(oidc): add Azure Entra ID support with configurable email claim resolution

Adds two new OIDC provider fields: email_claim and require_email_verified.
This commit is contained in:
Sn0rrii
2026-04-25 13:32:42 +02:00
committed by GitHub
parent 4304a42542
commit fdaec47378
22 changed files with 2288 additions and 73 deletions
Download Patch File Download Diff File Expand all files Collapse all files
frontend/src/contexts/AuthContext.tsx
+9 -9
View File
@@ -1,6 +1,6 @@
import React, { createContext, useCallback, useContext, useEffect, useMemo, useRef, useState } from 'react';
import { api, getAuthToken, setAuthToken } from '../api/client';
import type { LoginResponse, Permission, UserResponse } from '../api/client';
import type { LoginResponse, Permission, TokenPersistence, UserResponse } from '../api/client';
interface AuthContextType {
user: UserResponse | null;
@@ -9,9 +9,9 @@ interface AuthContextType {
loading: boolean;
isAdmin: boolean;
/** Login with username/password. Returns LoginResponse (may include requires_2fa). */
login: (username: string, password: string) => Promise<LoginResponse>;
login: (username: string, password: string, persistence?: TokenPersistence) => Promise<LoginResponse>;
/** Finalise login after 2FA or OIDC — store token and set user directly. */
loginWithToken: (token: string, user: UserResponse) => void;
loginWithToken: (token: string, user: UserResponse, persistence?: TokenPersistence) => void;
logout: () => void;
refreshUser: () => Promise<void>;
refreshAuth: () => Promise<void>;
@@ -41,7 +41,7 @@ export function AuthProvider({ children }: { children: React.ReactNode }) {
const urlParams = new URLSearchParams(window.location.search);
const urlToken = urlParams.get('token');
if (urlToken) {
setAuthToken(urlToken, false); // session-only until server confirms it's valid
setAuthToken(urlToken, 'session'); // session-only until server confirms it's valid
urlParams.delete('token');
const cleanSearch = urlParams.toString();
const cleanUrl = window.location.pathname
@@ -64,7 +64,7 @@ export function AuthProvider({ children }: { children: React.ReactNode }) {
setUser(currentUser);
// Persist kiosk token only after the server confirms it is valid.
if (urlToken && token === urlToken) {
setAuthToken(urlToken, true);
setAuthToken(urlToken, 'persistent');
}
} catch {
// Token invalid, clear it (removes from both sessionStorage and localStorage)
@@ -116,17 +116,17 @@ export function AuthProvider({ children }: { children: React.ReactNode }) {
}
}, [loading, requiresSetup, authEnabled]);
const login = async (username: string, password: string): Promise<LoginResponse> => {
const login = async (username: string, password: string, persistence: TokenPersistence = 'session'): Promise<LoginResponse> => {
const response = await api.login({ username, password });
if (!response.requires_2fa && response.access_token) {
setAuthToken(response.access_token);
setAuthToken(response.access_token, persistence);
await checkAuthStatus();
}
return response;
};
const loginWithToken = (token: string, userObj: UserResponse) => {
setAuthToken(token);
const loginWithToken = (token: string, userObj: UserResponse, persistence: TokenPersistence = 'session') => {
setAuthToken(token, persistence);
setUser(userObj);
setAuthEnabled(true);
};