dtoro e8e1adcf37 feat(auth): Authentik OIDC sign-in + Gravatar avatars ...

Adds optional SSO via Authentik (or any OIDC provider) alongside the
existing password flow, and pulls profile images from the provider's
`picture` claim or Gravatar so the sharing UI stops looking anonymous.
Password login stays available as a recovery path; JIT provisioning and
admin-group mapping are env-configurable.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

2026-04-22 21:06:32 +02:00

4.7 KiB

Raw Blame History

View Raw