new: [OIDC] OIDC_LOGIN_TEXT to customise the login button label (#422)

Add an optional OIDC_LOGIN_TEXT environment variable that sets the
OidcAuth.login_button_text MISP config value, used to customise the
label of the OIDC login button shown when OIDC_MIXEDAUTH is enabled.

Only applied when set, so behaviour is unchanged by default. Follows
the same pattern as the other OIDC_* variables in set_up_oidc().

Requires the companion MISP change that reads OidcAuth.login_button_text
in app/View/Users/login.ctp (defaults to "Login with OIDC").

Author: cln-io

core/files/configure_misp.sh

@@ -121,6 +121,21 @@ set_up_oidc() {
             }" > /dev/null
         fi
 
+        # Set a custom label for the OIDC login button (shown when OIDC_MIXEDAUTH is enabled).
+        # Enforced on every start: when unset, clear any previous value so MISP falls back to
+        # its default ("Login with OIDC") instead of keeping a stale label.
+        if [[ -n "${OIDC_LOGIN_TEXT}" ]]; then
+            # JSON-encode the value so labels containing quotes/backslashes don't break the payload
+            OIDC_LOGIN_TEXT_JSON=$(printf '%s' "${OIDC_LOGIN_TEXT}" | jq -Rs .)
+        else
+            OIDC_LOGIN_TEXT_JSON='""'
+        fi
+        sudo -u www-data php /var/www/MISP/tests/modify_config.php modify "{
+            \"OidcAuth\": {
+                \"login_button_text\": ${OIDC_LOGIN_TEXT_JSON}
+            }
+        }" > /dev/null
+
         # Set the custom logout URL for OIDC if it is defined
         if [[ -n "${OIDC_LOGOUT_URL}" ]]; then
             if [[ "${OIDC_LOGOUT_URL}" == *"?"* ]]; then
@@ -149,7 +164,8 @@ set_up_oidc() {
                 \"code_challenge_method\": \"\",
                 \"roles_property\": \"\",
                 \"role_mapper\": \"\",
-                \"default_org\": \"\"
+                \"default_org\": \"\",
+                \"login_button_text\": \"\"
             }
         }" > /dev/null
 

docker-compose.yml

@@ -179,6 +179,7 @@ services:
       - "OIDC_ROLES_MAPPING=${OIDC_ROLES_MAPPING}"
       - "OIDC_DEFAULT_ORG=${OIDC_DEFAULT_ORG}"
       - "OIDC_MIXEDAUTH=${OIDC_MIXEDAUTH}"
+      - "OIDC_LOGIN_TEXT=${OIDC_LOGIN_TEXT}"
       - "OIDC_AUTH_METHOD=${OIDC_AUTH_METHOD}"
       - "OIDC_REDIRECT_URI=${OIDC_REDIRECT_URI}"
       - "OIDC_SCOPES=${OIDC_SCOPES}"

template.env

@@ -192,6 +192,7 @@ SYNCSERVERS_1_PULL_RULES=
 # OIDC_ROLES_MAPPING="{\"admin\": 1}"
 # OIDC_DEFAULT_ORG=
 # OIDC_MIXEDAUTH=true
+# OIDC_LOGIN_TEXT="Login with OIDC"
 # OIDC_AUTH_METHOD="client_secret_post"
 # OIDC_REDIRECT_URI=
 # OIDC_SCOPES="[\"profile\", \"email\"]"