463cab1196
- Add displayName field to AuthTokenResponse so the UI shows human-readable names instead of internal JWT subjects (e.g. user:oidc:<hash>) - Add displayNameClaim to OIDC config (default: "name") allowing admins to configure which ID token claim contains the user's display name - Support dot-separated claim paths (e.g. profile.display_name) like rolesClaim - Add admin UI field for Display Name Claim on the OIDC config page - ClickHouse migration: ALTER TABLE adds display_name_claim column Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
14 lines
557 B
SQL
14 lines
557 B
SQL
CREATE TABLE IF NOT EXISTS oidc_config (
|
|
config_id String DEFAULT 'default',
|
|
enabled Bool DEFAULT false,
|
|
issuer_uri String DEFAULT '',
|
|
client_id String DEFAULT '',
|
|
client_secret String DEFAULT '',
|
|
roles_claim String DEFAULT 'realm_access.roles',
|
|
default_roles Array(LowCardinality(String)),
|
|
auto_signup Bool DEFAULT true,
|
|
display_name_claim String DEFAULT 'name',
|
|
updated_at DateTime64(3, 'UTC') DEFAULT now64(3, 'UTC')
|
|
) ENGINE = ReplacingMergeTree(updated_at)
|
|
ORDER BY (config_id);
|