hsiegeln f4eafd9a0f feat: sync OIDC roles on every login, not just first ...

Roles from the id_token's rolesClaim are now diffed against stored
system roles on each OIDC login. Missing roles are added, revoked
roles are removed. Group memberships (manually assigned) are never
touched. This propagates scope revocations from the OIDC provider
on next user login.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-04-06 10:11:06 +02:00

..

src

feat: sync OIDC roles on every login, not just first

2026-04-06 10:11:06 +02:00

pom.xml

feat: add spring-boot-starter-oauth2-resource-server and OIDC properties

2026-04-05 13:06:53 +02:00