Spinnich 11a81c756f feat(auth): add OIDC_ALLOW_REGISTRATION toggle ...

Gate automatic account creation on OIDC login behind a new OIDC_ALLOW_REGISTRATION environment variable. Defaults to true, preserving the current auto-provisioning behavior; set it to false to run OIDC in an "existing users only" mode, where a login from an email without an existing RomM account is rejected with a 403 instead of silently creating one. Existing users are unaffected either way.

Adds the config constant, env.template and docs entries, and tests covering the enabled/disabled and existing-user paths.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-06-22 12:33:00 +00:00

..

adapters

set atari st to gen4

2026-06-17 15:51:44 -04:00

alembic

fix: correct down_revision reference in migration script

2026-06-19 07:39:00 +00:00

config

feat(auth): add OIDC_ALLOW_REGISTRATION toggle

2026-06-22 12:33:00 +00:00

decorators

Fix OIDC login with Google by adding OIDC_SERVER_METADATA_URL config option

2026-03-09 17:39:43 +00:00

endpoints

fix: allow ROM deletion when file is missing

2026-06-20 16:23:24 +00:00

exceptions

find a couple more uses

2026-02-09 17:26:21 -05:00

handler

feat(auth): add OIDC_ALLOW_REGISTRATION toggle

2026-06-22 12:33:00 +00:00

logger

feat: update logs endpoint to require 'logs.read' scope and adjust related authorization checks

2026-06-20 09:55:10 +00:00

models

Merge remote-tracking branch 'origin/master' into feat/screenshot-CRUD-endpoints

2026-06-19 07:35:07 +00:00

romm_test

Scope test-user grant to the romm_test namespace

2026-06-19 21:34:46 -04:00

tasks

Merge branch 'master' into feat/composite-hashing-archives

2026-05-29 11:50:17 -04:00

tests

feat(auth): add OIDC_ALLOW_REGISTRATION toggle

2026-06-22 12:33:00 +00:00

tools

fix tests and cleanup

2025-08-02 17:55:43 -04:00

utils

feat: update logs endpoint to require 'logs.read' scope and adjust related authorization checks

2026-06-20 09:55:10 +00:00

__version__.py

…

.coveragerc

start work on code coverage

2025-07-05 19:17:40 -04:00

alembic.ini

refactor: comment out post_write_hooks section in alembic.ini for clarity

2025-05-09 15:59:37 +00:00

conftest.py

Run backend tests in parallel with pytest-xdist

2026-06-19 21:02:47 -04:00

main.py

feat: update logs endpoint to require 'logs.read' scope and adjust related authorization checks

2026-06-20 09:55:10 +00:00

pytest.ini

undo

2026-05-17 17:39:47 -04:00

startup.py

SaveSync: guard recompute Job.exists() in try; assert full job_id contract

2026-05-30 10:11:45 +09:00

sync_watcher.py

SaveSync: push null-slot exclusion into the SQL query

2026-05-29 17:40:18 +09:00

watcher.py

add to watcher

2026-05-22 22:35:30 -04:00