Skip to content

feat: add OIDC authentication support via Traefik middleware#5888

Draft
boehlke wants to merge 1 commit intoOpenSlides:mainfrom
kryptance:feature/keycloak-oidc
Draft

feat: add OIDC authentication support via Traefik middleware#5888
boehlke wants to merge 1 commit intoOpenSlides:mainfrom
kryptance:feature/keycloak-oidc

Conversation

@boehlke
Copy link
Contributor

@boehlke boehlke commented Feb 19, 2026

Summary

  • Detect OIDC sessions from Traefik-injected Authorization header
  • Add auth-token.service.ts for JWT management and session detection
  • OIDC login button and logout flow via /oauth2/logout
  • Extract OIDC session detection utility for auth worker
  • Playwright E2E test suite for OIDC flows (login, logout, account, user sync)

Context

Part of the Keycloak OIDC integration. The client detects OIDC mode by checking for the Authorization header injected by the Traefik OIDC middleware.

Related PRs:

  • openslides-proxy: #35 (injects the Authorization header)
  • openslides-backend: #3340 (who-am-i endpoint)

🤖 Co-authored with Claude Code

@boehlke boehlke force-pushed the feature/keycloak-oidc branch from 466136c to f7392bf Compare March 9, 2026 12:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant