Add support for federated OpenID-Connect logins

[strk]

OpenID-Connect is already supported via the OAuth2 LoginSource, this ticket is to add support for the federated features of the spec: http://openid.net/specs/openid-connect-federation-1_0.html

NOTE: federated OpenID-2.0 is already supported (#618)
See #1010 for some previous discussion about OpenID-Connect and federation.

[strk]

Corresponding ticket in the library currently used for OIDC: markbates/goth#148

[colemickens]

Goth supports OpenID Connect now.

[strk]

Since which version @colemickens ? What would it take to make use of it from Gitea ? Just update to current master of Goth ? Do you have an OpenID-Connect provider to test an eventual implementation against ?

[colemickens]

It looks like Goth supported it since before you opened this issue, actually, from what I can tell: markbates/goth#127

Anyway, it also seems like Gitea already has OIDC login... #3644

Also, there's this issue, also from you, where you were using it? #2100

I would be testing against Dex. I haven't stood up Gitea yet, might be a while before I make it back around to.

[meredrica]

Any news on this? Gitea looks really nice but not having SSO is a deal breaker for me :(

[coolaj86]

This is something that I am working on personally and I'm trying to work slowly and with distinct commits so that it can come into mainline.

Check out #5029 if you're interested (just ux and bug fixes around the existing implementation so far). I also have instructions (in the issue) for giving my branch a test try if you'd like.

cc/ @meredrica

[stale]

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs during the next 2 weeks. Thank you for your contributions.

[stale]

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs during the next 2 weeks. Thank you for your contributions.