Kyle Isom 519f8f8879 sso: add PublicURL for browser authorize (split from backend MciasURL) ...

Lets services point the browser SSO authorize redirect at the public
MCIAS hostname while keeping the server-to-server code exchange on the
internal/Tailnet address (efficient, edge-independent). PublicURL is
optional and falls back to MciasURL.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-06-11 11:03:27 -07:00

..

sso_test.go

Fix SSO return-to redirect loop

2026-03-31 14:54:55 -07:00

sso.go

sso: add PublicURL for browser authorize (split from backend MciasURL)

2026-06-11 11:03:27 -07:00