Kyle Isom 519f8f8879 sso: add PublicURL for browser authorize (split from backend MciasURL) ...

Lets services point the browser SSO authorize redirect at the public
MCIAS hostname while keeping the server-to-server code exchange on the
internal/Tailnet address (efficient, edge-independent). PublicURL is
optional and falls back to MciasURL.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-06-11 11:03:27 -07:00

10 KiB

Raw Blame History

View Raw