Feb 7, 2025 · Feb 7, 2025
diff --git a/cli/server.go b/cli/server.go
 }
 }

 if vals.OIDC.ClientKeyFile != "" || vals.OIDC.ClientSecret != "" {
 // As OIDC clients can be confidential or public,
 // we should only check for a client id being set.
 // The underlying library handles the case of no
 // client secrets correctly. For more details on
 // client types: https://oauth.net/2/client-types/
 if vals.OIDC.ClientID != "" {
 if vals.OIDC.IgnoreEmailVerified {
 logger.Warn(ctx, "coder will not check email_verified for OIDC logins")
 }
diff --git a/scripts/dev-oidc.sh b/scripts/dev-oidc.sh
      "baseUrl": "/coder",
      "redirectUris": ["*"],
      "secret": "coder"
    },
    {
      "clientId": "coder-public",
      "publicClient": true,
      "directAccessGrantsEnabled": true,
      "enabled": true,
      "fullScopeAllowed": true,
      "baseUrl": "/coder",
      "redirectUris": [
        "*"
      ]
    }
  ]
 }
 export CODER_OIDC_ISSUER_URL="http://${hostname}:9080/realms/coder"
 export CODER_OIDC_CLIENT_ID=coder
 export CODER_OIDC_CLIENT_SECRET=coder
 # Comment out the two lines above, and comment in the line below,
 # to configure OIDC auth using a public client.
 # export CODER_OIDC_CLIENT_ID=coder-public
 export CODER_DEV_ACCESS_URL="http://${hostname}:8080"

 exec "${SCRIPT_DIR}/develop.sh" "$@"
Original file line number	Diff line number	Diff line change
Expand Up		@@ -694,7 +694,12 @@ func (r RootCmd) Server(newAPI func(context.Context, coderd.Options) (*coderd.
		}
		}

		if vals.OIDC.ClientKeyFile != "" \|\| vals.OIDC.ClientSecret != "" {
		// As OIDC clients can be confidential or public,
		// we should only check for a client id being set.
		// The underlying library handles the case of no
		// client secrets correctly. For more details on
		// client types: https://oauth.net/2/client-types/
		if vals.OIDC.ClientID != "" {
		if vals.OIDC.IgnoreEmailVerified {
		logger.Warn(ctx, "coder will not check email_verified for OIDC logins")
		}
Expand Down
Original file line number	Diff line number	Diff line change
Expand Up		@@ -49,6 +49,17 @@ cat <<EOF >/tmp/example-realm.json
		"baseUrl": "/coder",
		"redirectUris": ["*"],
		"secret": "coder"
		},
		{
		"clientId": "coder-public",
		"publicClient": true,
		"directAccessGrantsEnabled": true,
		"enabled": true,
		"fullScopeAllowed": true,
		"baseUrl": "/coder",
		"redirectUris": [
		"*"
		]
		}
		]
		}
Expand DownExpand Up		@@ -79,6 +90,9 @@ hostname=$(hostname -f)
		export CODER_OIDC_ISSUER_URL="http://${hostname}:9080/realms/coder"
		export CODER_OIDC_CLIENT_ID=coder
		export CODER_OIDC_CLIENT_SECRET=coder
		# Comment out the two lines above, and comment in the line below,
		# to configure OIDC auth using a public client.
		# export CODER_OIDC_CLIENT_ID=coder-public
		export CODER_DEV_ACCESS_URL="http://${hostname}:8080"

		exec "${SCRIPT_DIR}/develop.sh" "$@"