3 Commits

Author	SHA1	Message	Date
Kyle Isom	ee31dff01e	sso: support public MCIAS authorize URL for non-Tailnet browsers ... Add [sso].public_url: the browser-facing MCIAS base URL for the SSO authorize redirect, kept separate from [mcias].server_url (the internal address used for the server-to-server code exchange). Enables public SSO without routing internal auth through the edge. Bumps mcdsl to v1.9.0. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-06-11 11:06:43 -07:00
Kyle Isom	bed563fd20	Update mcdsl to v1.7.0 (SSO cookie fix for Firefox) ... Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-03-31 23:14:34 -07:00
Kyle Isom	647fd26e60	Add SSO login support ... - Add [sso] config section with redirect_uri - Create mcdsl/sso client when SSO is configured - Add /login (landing page), /sso/redirect, /sso/callback routes - Add /logout route - Update login template with SSO landing page variant - Bump mcdsl to v1.6.0 Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-03-31 20:23:25 -07:00