Thanks to visit codestin.com
Credit goes to github.com

Skip to content

feat: unhide --oidc-redirect-url server option #28072

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
Emyrk merged 1 commit into from
Aug 12, 2026
Merged

feat: unhide --oidc-redirect-url server option #28072

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 6 additions & 0 deletions cli/testdata/coder_server_--help.golden
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -807,6 +807,12 @@ OIDC OPTIONS:
--oidc-name-field string, $CODER_OIDC_NAME_FIELD (default: name)
OIDC claim field to use as the name.

--oidc-redirect-url url, $CODER_OIDC_REDIRECT_URL
Optional override of the default redirect url which uses the
deployment's access url. Useful in situations where a deployment has
more than 1 domain. Using this setting can also break OIDC, so use
with caution.

--oidc-group-regex-filter regexp, $CODER_OIDC_GROUP_REGEX_FILTER (default: .*)
If provided any group name not matching the regex is ignored. This
allows for filtering out groups that are not needed. This filter is
Expand Down
3 changes: 0 additions & 3 deletions codersdk/deployment.go
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3087,9 +3087,6 @@ communicating directly.`,
Value: &c.OIDC.RedirectURL,
Group: &deploymentGroupOIDC,
UseInstead: nil,
// In most deployments, this setting can only complicate and break OIDC.
// So hide it, and only surface it to the small number of users that need it.
Hidden: true,
},
{
Name: "OIDC Auto Repair Links",
Expand Down
8 changes: 8 additions & 0 deletions docs/admin/setup/configuration-reference.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -1593,6 +1593,14 @@ OIDC claim field to use as the name.
- YAML key: `oidc.nameField`
- Default value: `name`

### Redirect URL

Optional override of the default redirect url which uses the deployment's access url. Useful in situations where a deployment has more than 1 domain. Using this setting can also break OIDC, so use with caution.

- Environment variable: `CODER_OIDC_REDIRECT_URL`
- CLI flag: [`--oidc-redirect-url`](../../reference/cli/server.md#--oidc-redirect-url)
- YAML key: `oidc.oidc-redirect-url`

### Regex group filter

If provided any group name not matching the regex is ignored. This allows for filtering out groups that are not needed. This filter is applied after the group mapping.
Expand Down
10 changes: 10 additions & 0 deletions docs/reference/cli/server.md
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

6 changes: 6 additions & 0 deletions enterprise/cli/testdata/coder_server_--help.golden
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -808,6 +808,12 @@ OIDC OPTIONS:
--oidc-name-field string, $CODER_OIDC_NAME_FIELD (default: name)
OIDC claim field to use as the name.

--oidc-redirect-url url, $CODER_OIDC_REDIRECT_URL
Optional override of the default redirect url which uses the
deployment's access url. Useful in situations where a deployment has
more than 1 domain. Using this setting can also break OIDC, so use
with caution.

--oidc-group-regex-filter regexp, $CODER_OIDC_GROUP_REGEX_FILTER (default: .*)
If provided any group name not matching the regex is ignored. This
allows for filtering out groups that are not needed. This filter is
Expand Down
Loading