Skip to content

feat(code): log in to Forgejo through the stack's OIDC provider - #128

Merged
arthware-dev merged 1 commit into
mainfrom
feat/code-oidc
Sep 23, 2026
Merged

arthware-dev merged 1 commit into
mainfrom
feat/code-oidc

Conversation

@arthware-dev

Copy link
Copy Markdown
Contributor

Summary

  • With an OIDC provider installed and the code stacklet registered, ./stack up code adds a "family account" login source to Forgejo, and its login page shows "Sign in with family account". Existing accounts link by username or email; without a provider nothing changes.
  • The source is managed through Forgejo's admin CLI via ctx.run_in_container and updated only when the provider's credentials change; other login sources and the password login stay as they are.

When a stacklet that provides OpenID Connect is installed and has
registered the code stacklet, `./stack up code` adds a "family account"
login source to Forgejo, and its login page shows "Sign in with family
account". Without a provider nothing changes.

- Existing accounts are linked by username or email, since family
  members already have Forgejo accounts under the usernames the
  provider sends. Someone without an account gets one on first login.
- The source is managed through Forgejo's admin CLI and updated when
  the provider's credentials change. Other login sources and the
  password login stay as they are.
- After the provider is destroyed the source stays until an admin
  removes it in Site administration, Authentication sources.
@arthware-dev
arthware-dev merged commit e9f97ff into main Sep 23, 2026
1 check passed
@arthware-dev
arthware-dev deleted the feat/code-oidc branch September 23, 2026 20:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant