vh/homepage
1
0
Fork 0
mirror of https://github.com/gethomepage/homepage.git synced 2026-09-15 08:35:49 -07:00
Code Issues Actions 11 Packages Projects Releases Wiki Activity

Clarify oidc claim policy
Docker CI / Docker Build & Push (push) Has been cancelled
Details
Lint / Linting Checks (push) Has been cancelled
Details
Release Drafter / Update Release Draft (push) Has been cancelled
Details
Release Drafter / Auto Label PR (push) Has been cancelled
Details
Tests / vitest (1) (push) Has been cancelled
Details
Tests / vitest (2) (push) Has been cancelled
Details
Tests / vitest (3) (push) Has been cancelled
Details
Tests / vitest (4) (push) Has been cancelled
Details

Browse Source
This commit is contained in:
shamoon
2026-07-13 10:39:33 -07:00
parent b7fb4405e4
commit e57cf9181e
1 changed files with 4 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/installation/index.md
+4
View File
@@ -66,6 +66,10 @@ For OIDC login (overrides password login):
- `HOMEPAGE_OIDC_CLIENT_SECRET`
- Optional: `HOMEPAGE_OIDC_NAME` (display name), `HOMEPAGE_OIDC_SCOPE` (defaults to `openid email profile`)
!!! warning
Homepage grants access to any identity that the configured OIDC provider authorizes for this client. Configure client assignments, groups, or access policies at the identity provider. Homepage does not apply additional claim-based authorization.
All app pages and `/api` routes except `/api/healthcheck` will require a signed-in session. Static assets remain public.
Configure your OIDC provider with the a callback URI like `https://homepage.example.com/api/auth/callback/homepage-oidc`.