summaryrefslogtreecommitdiff
path: root/example
diff options
context:
space:
mode:
authorLibravatar 9p4 <vcs@ersei.net>2024-02-27 10:07:29 -0500
committerLibravatar GitHub <noreply@github.com>2024-02-27 16:07:29 +0100
commit9bf448be7aa5e2468d5a6302d7c37ebad0f84176 (patch)
treec03e0079e84d8fd412cc23abc9ebb1b1118559e8 /example
parent[chore/docs] Various little docs updates (#2691) (diff)
downloadgotosocial-9bf448be7aa5e2468d5a6302d7c37ebad0f84176.tar.xz
[feature/oidc] Add support for very basic RBAC (#2642)
* Add support for very basic RBAC * Add some small tests for allowedGroup and adminGroup * Switch to table-driven tests
Diffstat (limited to 'example')
-rw-r--r--example/config.yaml6
1 files changed, 6 insertions, 0 deletions
diff --git a/example/config.yaml b/example/config.yaml
index 1073c656b..bdc09da79 100644
--- a/example/config.yaml
+++ b/example/config.yaml
@@ -730,6 +730,12 @@ oidc-scopes:
oidc-link-existing: false
# Array of string. If the returned ID token contains a 'groups' claim that matches one of the
+# groups in oidc-allowed-groups, then this user will be granted access on the GtS instance. If the array is empty,
+# then all groups will be granted permission.
+# Default: []
+oidc-allowed-groups: []
+
+# Array of string. If the returned ID token contains a 'groups' claim that matches one of the
# groups in oidc-admin-groups, then this user will be granted admin rights on the GtS instance
# Default: []
oidc-admin-groups: []