feat(oidc): enhance SSO target app resolution and audit logging

- Updated targetAppFromReturnTo function to handle OIDC authorization unwrap and added search parameter processing. - Integrated target app resolution into the OIDC route for improved audit logging of SSO handoffs. - Added a test case to verify the logging of the target app during the authorization process. - Updated documentation to reflect changes in audit logging for the Technitium DNS application. Co-authored-by: Cursor <[email protected]>
2026-08-11 20:01:51 +07:00
parent 36c4091dbf
commit 4ce05a6669
5 changed files with 123 additions and 1 deletions
@@ -88,6 +88,8 @@ curl -fsS http://localhost:8080/.well-known/openid-configuration | head

 Для `dns` режим `authMode: oidc` — открывается базовый URL (кнопка OpenID Connect на логине Technitium), без `#access_token`.

+Журнал входов портала: при выдаче authorization code пишется `auth.sso_handoff` с `target_app: dns` (колонка «Приложение» → Technitium DNS).
+
 ## Endpoints portal (IdP)

 - `GET /.well-known/openid-configuration`