OpenID Connect

[rucciva]

Hi, is there any plan to include OpenID Connect as a backend?

Thanks

[smancke]

The OAuth Backends (e.g. the google one) are indeed doing OpenID Connect, if I got the Idea behind OpenID Connect right.

[rucciva]

OpenID Connect is a standard so i think it should be possible to be used with another OpenID Connect provider besides google. Most of OpenID Connect relying party that i have encountered usually need to point to the /.well-known/openid-configuration URL or directly storing the configuration. Here are an example from sonarqube.

i think by implementing the openid connect, loginsrv (and i hope caddy too) will be able to integrate with multiple OAuth2 based identity provider. the client libraries are also available, e.g. https://github.com/coreos/go-oidc

[smancke]

OK, would be a good idea to make a generic backend which uses the discovery document and does the configuration dynamically.