Skip to content

M2d: OIDC sign-in against a deployment-controlled IdP (BR-36) #95

New issue
New issue
Closed
#105
Closed
M2d: OIDC sign-in against a deployment-controlled IdP (BR-36)#95
#105
Labels
artART framework extension workenhancementNew feature or request
Milestone
ART extension

Description

@amar-python
amar-python
opened on Oct 26, 2026

Part of ART Milestone 2 (BR-36; ADR-0003 approved OIDC plus local fallback).

  • Validate tokens from a configured issuer via its JWKS (no SaaS IdP at runtime).
  • Map claims to a user and tenant membership. Disabled unless configured, so air-gapped installs use local accounts (M2a).

Verified by: tests against a locally generated key and token (valid, expired, wrong issuer, wrong audience).

Generated by Claude Code

Activity

  1. amar-python
    added this to the ART extension milestone on Oct 26, 2026
  2. amar-python
    added
    enhancementNew feature or request
    artART framework extension work
    on Oct 26, 2026
  3. amar-python
    added a commit that references this issue on Oct 26, 2026

    Merge pull request #105 from amar-python/feat/m2d-oidc

    9f789cf
  4. amar-python
    closed this as completedin #105on Oct 26, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    artART framework extension workenhancementNew feature or request

    Projects

    No projects

      Milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions