mirror of
https://github.com/photoprism/photoprism.git
synced 2026-07-21 01:06:10 +00:00
Move the Portal OIDC OP authorize/token/userinfo onto the shared CE /api/v1/oauth/* routes (the reserved #4368/#4369 stubs) and drop the parallel root /oauth/* set. - Add overridable handler hooks (oauth_handlers.go) mirroring server.WebDAVHandler; OAuthToken delegates only the authorization_code grant (gated on a form content type) and keeps client_credentials/password/session unchanged; userinfo now serves GET and POST. - Scope the OP session cookie to /api/v1/oauth (base-path aware) so the browser still sends it to the moved authorize endpoint instead of looping. - Stop the proxy re-scoping instance->Portal authorize redirects (portalRootPathPrefixes -> /api/v1/oauth/). - Point discovery at issuer + /api/v1/oauth/*; fix the JWKS URL base-path doubling for sub-path deployments (also in CE openid.go). |
||
|---|---|---|
| .. | ||
| authn | ||
| capture | ||
| checksum | ||
| clean | ||
| dsn | ||
| enum | ||
| env | ||
| fs | ||
| geo | ||
| http | ||
| i18n | ||
| list | ||
| log | ||
| media | ||
| react | ||
| rnd | ||
| time | ||
| txt | ||
| vector | ||
| AGENTS.md | ||