docs: rework the OIDC documentation and split the OIDC and RBAC guides into sections - #522

Open

glasstiger wants to merge 58 commits into

mainfrom

ia_oidc_config_options

Commits on Aug 21, 2026

Document the missing OIDC configuration options

glasstiger
and
claude
committed
5e9da21
Note the state parameter requirement in the OIDC guide

glasstiger
and
claude
committed
dc7276c
Merge branch 'main' into ia_oidc_config_options
glasstiger
authored
9e3fb2c
Document the OIDC constraints which fail server startup

glasstiger
and
claude
committed
8724ece
Note that endpoint discovery supersedes the endpoint settings

glasstiger
and
claude
committed
5d31797
Document the Device Code Flow in the OIDC guide

glasstiger
and
claude
committed
438f84e
Correct what the device authorization endpoint setting controls

glasstiger
and
claude
committed
a890f52
Distinguish the millisecond settings which accept a duration

glasstiger
and
claude
committed
6da5c5b
Give one rule for enabling the state parameter

glasstiger
and
claude
committed
97559b4
Correct what happens when the groups claim is missing

glasstiger
and
claude
committed
88ee167
Add the missing QuestDB configuration to the PingFederate guide

glasstiger
and
claude
committed
93dc7f7
Use the repo's spelling convention in the state parameter entry

glasstiger
and
claude
committed
eec6f6d
Name both QuestDB configuration sections after their provider

glasstiger
and
claude
committed
6dab137
Document the settings endpoint clients read the OIDC configuration from

glasstiger
and
claude
committed
e76c0f9
Show how to run the Device Code Flow

glasstiger
and
claude
committed
ad08e2e
Correct what the public keys expiry controls

glasstiger
and
claude
committed
8e96bb8
Name the response each protocol gives when the claims are missing

glasstiger
and
claude
committed
58c7dfd
Remove the Device Code Flow documentation

glasstiger
and
claude
committed
fb1a3c2
Correct when QuestDB reads the OIDC public keys

glasstiger
and
claude
committed
8733605
Say what disabling the user info cache does in each flow

glasstiger
and
claude
committed
d827870
Describe the whole OIDC guide, not just Web Console SSO

glasstiger
and
claude
committed
952e8d5
Say what the OIDC settings actually require and enforce

glasstiger
and
claude
committed
8792eac
Document what the settings endpoint guarantees to a client

glasstiger
and
claude
committed
b875d2d
Correct what overriding the settings context path does

glasstiger
and
claude
committed
afb0e2a
Stop overstating what the OIDC settings guarantee

glasstiger
and
claude
committed
7ac66b9
Complete what the settings endpoint section tells a client

glasstiger
and
claude
committed
7623732
Point the client pages at the OIDC settings endpoint

glasstiger
and
claude
committed
32a1739
Move the OIDC guide entries out of the reference section

glasstiger
and
claude
committed
6703c21

Commits on Aug 23, 2026

Tell clients which token to send, and correct three claims

glasstiger
and
claude
committed
5e815f7
Say what QuestDB checks when it validates a token itself

glasstiger
and
claude
committed
390408c
Scope three OIDC options to what the server actually does

glasstiger
and
claude
committed
4ddda15
Stop the client pages naming the wrong token

glasstiger
and
claude
committed
1b30683
Give the ingestion example its own client id, and guard its lookups

glasstiger
and
claude
committed
e7bd184

Commits on Sep 2, 2026

Commits on Sep 3, 2026

Reconcile OIDC across the pages that contradict it

glasstiger
and
claude
committed
c366b4b
Give the OIDC device flow its own page and single-source its examples

glasstiger
and
claude
committed
81131f9
Correct the remaining OIDC inaccuracies and inconsistencies

glasstiger
and
claude
committed
f3cb07c
Correct the prompt sanitization claim and the C++ error kind

glasstiger
and
claude
committed
b8ddc18
Fix the OIDC device flow's misleading client guidance

glasstiger
and
claude
committed
a4368d8
Settle the OIDC device flow's naming, fences and remaining snags

glasstiger
and
claude
committed
13912fb
Give the device flow's reference sections and the DIY path their own homes

glasstiger
and
claude
committed
afd838e
Document the token expiry check and drop the JupyterHub detour

glasstiger
and
claude
committed
a97e79c
Merge remote-tracking branch 'origin/main' into ia_oidc_config_options
glasstiger
committed
c6527f6

Commits on Sep 4, 2026

Split the OIDC page into a section

glasstiger
and
claude
committed
1d789cf
Split the RBAC page into a section

glasstiger
and
claude
committed
68c9c4b
Correct what the clients do without a terminal

glasstiger
and
claude
committed
0574137
Fix the OIDC and RBAC examples which do not run

glasstiger
and
claude
committed
d381b71
Put the OIDC and RBAC section roots back in llms.txt

glasstiger
and
claude
committed
c67eef6
docs: correct OIDC client guidance
glasstiger
committed
964b8c4
docs: polish OIDC and RBAC restructure
glasstiger
committed
b1257ca
Merge branch 'main' into ia_oidc_config_options
glasstiger
authored
a347e4d
docs: address OIDC and RBAC review findings
glasstiger
committed
ef66a91

Commits on Sep 6, 2026

docs: document device flow in containers
glasstiger
committed
23530b3
docs: add device flow example prerequisites
glasstiger
committed
3165576
docs: address OIDC and RBAC review feedback
glasstiger
committed
b7f2e62