From 073bda57b44784c751b0b499f262d43b20fc59d4 Mon Sep 17 00:00:00 2001 From: Manuel Ganter Date: Wed, 13 Aug 2025 14:30:34 +0000 Subject: [PATCH] update gitea connector documentation to include group claims improved docs ad --- content/docs/connectors/gitea.md | 12 +++++++++++- 1 file changed, 11 insertions(+), 1 deletion(-) diff --git a/content/docs/connectors/gitea.md b/content/docs/connectors/gitea.md index 51337c0..8e6f7dd 100644 --- a/content/docs/connectors/gitea.md +++ b/content/docs/connectors/gitea.md @@ -12,7 +12,7 @@ weight: 2130 One of the login options for dex uses the Gitea OAuth2 flow to identify the end user through their Gitea account. -When a client redeems a refresh token through dex, dex will re-query Gitea to update user information in the ID Token. To do this, __dex stores a readonly Gitea access token in its backing datastore.__ Users that reject dex's access through Gitea will also revoke all dex clients which authenticated them through Gitea. +When a client redeems a refresh token through dex, dex will re-query Gitea to update user information in the ID Token. To do this, __dex stores a readonly Gitea access token in its backing datastore.__ Users that reject dex's access through Gitea will also revoke all dex clients which authenticated them through Gitea. Does also support [Forgejo](https://forgejo.org/). ## Configuration @@ -34,4 +34,14 @@ connectors: redirectURI: http://127.0.0.1:5556/dex/callback # optional, default = https://gitea.com baseURL: https://gitea.com + # Includes all gittea groups as groups claim (OrgaName, OrgaName:TeamName) (disabled if orgs is defined) + loadAllGroups: true + + #orgs: + # # Organization name in gitea (not slug, full name). Only users in this gitea organization can authenticate. + # - name: OrgaName + # Names of teams in a gitea organization. A user will be able to authenticate if they are members of at least one of these teams. Users in the organization can authenticate if this field is omitted from the config file. + # teams: + # - TeamName1 + # - TeamName2 ```