http: GET /auth/oidc/callback — JIT-provision, refresh, deny paths

2026-05-05 13:30:00 +01:00
parent 746324e65a
commit 1fd9dce8a2
3 changed files with 287 additions and 1 deletions
@@ -146,7 +146,7 @@ func (s *Server) routes(r chi.Router) {
 	}
 	if s.deps.OIDC != nil {
 		r.Get("/auth/oidc/login", s.handleOIDCLogin)
-		// /auth/oidc/callback registered in D2
+		r.Get("/auth/oidc/callback", s.handleOIDCCallback)
 	}

 	// Viewer band — anyone authenticated can read.