[DRAFT] Add OIDC Support to Aerie-UI#1746

Open

pranav-super wants to merge 22 commits intodevelopfrom

feature/oidc-support

Commits on Feb 12, 2026

Add OIDC authentication support with Arctic library

jmorton
authored and
AaronPlave
committed
Replace PageData.user with reactive userStore across application

jmorton
authored and
AaronPlave
committed
Add server-side rule enforcement infrastructure

jmorton
authored and
AaronPlave
committed
Add E2E tests for OIDC authentication flow

jmorton
authored and
AaronPlave
committed
Update non-OIDC auth routes to use event-based cookie handling

jmorton
authored and
AaronPlave
committed
Fix race condition in OIDC well-known configuration fetch

jmorton
authored and
AaronPlave
committed
Add OIDC nonce parameter for replay attack protection

jmorton
authored and
AaronPlave
committed
Add audience claim validation to JWT verification

jmorton
authored and
AaronPlave
committed
Validate audience only on ID token per OIDC spec

jmorton
authored and
AaronPlave
committed
Fix open redirect vulnerability in back parameter

jmorton
authored and
AaronPlave
committed
Add secure flag to all authentication cookies

jmorton
authored and
AaronPlave
committed
Add SameSite=Lax to all authentication cookies

jmorton
authored and
AaronPlave
committed
Add configurable JWT signing algorithms via OIDC_ALGORITHMS env var

jmorton
authored and
AaronPlave
committed
Remove sensitive data from OIDC logs

jmorton
authored and
AaronPlave
committed
Standardize OIDC logging and fix additional sensitive data leaks

jmorton
authored and
AaronPlave
committed
Add Content Security Policy headers (report-only mode)

jmorton
authored and
AaronPlave
committed
Verify ID token before using as logout hint

jmorton
authored and
AaronPlave
committed
Add configurable JWT claim paths for OIDC

jmorton
authored and
AaronPlave
committed
Use dynamically loaded env vars for OIDC related values set at launch / runtime.

jmorton
authored and
AaronPlave
committed

Commits on Feb 17, 2026

Commits on Feb 18, 2026

Handle expired refresh tokens gracefully instead of infinite retry loop
AaronPlave
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

[DRAFT] Add OIDC Support to Aerie-UI#1746

[DRAFT] Add OIDC Support to Aerie-UI#1746
pranav-super wants to merge 22 commits intodevelopfrom
feature/oidc-support

Commits on Feb 12, 2026

Add OIDC authentication support with Arctic library

Replace PageData.user with reactive userStore across application

Add server-side rule enforcement infrastructure

Add E2E tests for OIDC authentication flow

Update non-OIDC auth routes to use event-based cookie handling

Fix race condition in OIDC well-known configuration fetch

Add OIDC nonce parameter for replay attack protection

Add audience claim validation to JWT verification

Validate audience only on ID token per OIDC spec

Fix open redirect vulnerability in back parameter

Add secure flag to all authentication cookies

Add SameSite=Lax to all authentication cookies

Add configurable JWT signing algorithms via OIDC_ALGORITHMS env var

Remove sensitive data from OIDC logs

Standardize OIDC logging and fix additional sensitive data leaks

Add Content Security Policy headers (report-only mode)

Verify ID token before using as logout hint

Add configurable JWT claim paths for OIDC

Use dynamically loaded env vars for OIDC related values set at launch / runtime.

Commits on Feb 17, 2026

Fix WebSocket lifecycle and token refresh for OIDC

Linting, fixes, and small cleanup

Commits on Feb 18, 2026

Handle expired refresh tokens gracefully instead of infinite retry loop