Document OAuth2 admin protection
Some checks failed
/ deploy (push) Has been cancelled

This commit is contained in:
Loyyd 2026-06-18 12:15:03 +02:00
parent d14a81e523
commit 8d989f791b
3 changed files with 87 additions and 77 deletions

View file

@ -6,11 +6,11 @@ reverse proxy for that hostname to serve `dist/admin/index.html` as its root
document.
Protect `admin.familyfed.ie` at the web server, reverse proxy, or hosting layer
with Pocket ID authentication. Require the Pocket ID user group
with OAuth2/OIDC through Pocket ID. Require the Pocket ID user group
`familyfed_admin`. The generated page has `noindex`, but a static page cannot
enforce a secure admin login by itself.
See `docs/POCKET-ID-AUTH.md` for the exact proxy/auth requirements.
See `docs/OAUTH2-AUTH.md` for the exact proxy/auth requirements.
## Content changes