chore(ci): add workflow for building Docker images on release

feat(oidc claims): extend Claims struct with additional fields for user attributes
fix(deps): update module golang.org/x/oauth2 to v0.34.0 (#17 )
2026-01-06 19:14:50 +00:00 · 2026-01-06 19:14:40 +00:00 · 2025-12-08 22:22:38 +00:00 · 2025-12-06 11:03:20 +00:00
6 changed files with 27 additions and 6 deletions
--- a/.gitea/workflows-disabled/build_docker.yml
+++ b/.gitea/workflows-disabled/build_docker.yml
--- a/.gitea/workflows/release.yml
+++ b/.gitea/workflows/release.yml
@@ -61,7 +61,7 @@ jobs:
          REPO: ${{ gitea.repository }}

      - name: Check out repository
-        uses: actions/checkout@v6.0.0
+        uses: actions/checkout@v6.0.1
        with:
          fetch-depth: 0
          ref: ${{ needs.tag.outputs.tag_name }}
--- a/go.mod
+++ b/go.mod
@@ -8,7 +8,7 @@ require (
 	github.com/crewjam/saml v0.5.1
 	github.com/fsnotify/fsnotify v1.9.0
 	github.com/russellhaering/goxmldsig v1.5.0
-	golang.org/x/oauth2 v0.33.0
+	golang.org/x/oauth2 v0.34.0
 	gopkg.in/yaml.v3 v3.0.1
 )

--- a/go.sum
+++ b/go.sum
@@ -58,6 +58,8 @@ golang.org/x/oauth2 v0.28.0 h1:CrgCKl8PPAVtLnU3c+EDw6x11699EWlsDeWNWKdIOkc=
 golang.org/x/oauth2 v0.28.0/go.mod h1:onh5ek6nERTohokkhCD/y2cV4Do3fxFHFuAejCkRWT8=
 golang.org/x/oauth2 v0.33.0 h1:4Q+qn+E5z8gPRJfmRy7C2gGG3T4jIprK6aSYgTXGRpo=
 golang.org/x/oauth2 v0.33.0/go.mod h1:lzm5WQJQwKZ3nwavOZ3IS5Aulzxi68dUSgRHujetwEA=
+golang.org/x/oauth2 v0.34.0 h1:hqK/t4AKgbqWkdkcAeI8XLmbK+4m4G5YeQRrmiotGlw=
+golang.org/x/oauth2 v0.34.0/go.mod h1:lzm5WQJQwKZ3nwavOZ3IS5Aulzxi68dUSgRHujetwEA=
 golang.org/x/sys v0.22.0 h1:RI27ohtqKCnwULzJLqkv897zojh5/DwS/ENaMzUOaWI=
 golang.org/x/sys v0.22.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
 golang.org/x/sys v0.30.0 h1:QjkSwP/36a20jFYWkSue1YwXzLmsV5Gfq7Eiy72C1uc=
--- a/internal/http/handlers.go
+++ b/internal/http/handlers.go
@@ -95,6 +95,20 @@ func Register(
 				attrs[samlAttr] = []string{claims.Email}
 			case "name":
 				attrs[samlAttr] = []string{claims.Name}
+			case "display_name":
+				attrs[samlAttr] = []string{claims.DisplayName}
+			case "email_verified":
+				if claims.EmailVerified {
+					attrs[samlAttr] = []string{"true"}
+				} else {
+					attrs[samlAttr] = []string{"false"}
+				}
+			case "given_name":
+				attrs[samlAttr] = []string{claims.GivenName}
+			case "family_name":
+				attrs[samlAttr] = []string{claims.FamilyName}
+			case "preferred_username":
+				attrs[samlAttr] = []string{claims.PreferredUsername}
 			case "role":
 				attrs[samlAttr] = []string{mapRole(claims.Groups, sp)}
 			}
--- a/internal/oidc/client.go
+++ b/internal/oidc/client.go
@@ -39,10 +39,15 @@ func NewClient(cfg *config.Config) (*Client, error) {
 }

 type Claims struct {
-	Subject string   `json:"sub"`
-	Email   string   `json:"email"`
-	Name    string   `json:"name"`
-	Groups  []string `json:"groups"`
+	Subject           string   `json:"sub"`
+	Email             string   `json:"email"`
+	Name              string   `json:"name"`
+	Groups            []string `json:"groups"`
+	DisplayName       string   `json:"display_name"`
+	EmailVerified     bool     `json:"email_verified"`
+	FamilyName        string   `json:"family_name"`
+	GivenName         string   `json:"given_name"`
+	PreferredUsername string   `json:"preferred_username"`
 }

 func (c *Client) AuthCodeURL(state string, extra url.Values) string {
Author	SHA1	Message	Date
Luke Tainton	e6062779f7	chore(ci): add workflow for building Docker images on release Some checks failed Release / Tag release (push) Successful in 7s Details Release / Create Release (push) Successful in 1s Details Release / Publish Docker Images (push) Failing after 1m23s Details	2026-01-06 19:14:50 +00:00
Luke Tainton	47ed3fc628	feat(oidc claims): extend Claims struct with additional fields for user attributes	2026-01-06 19:14:40 +00:00
renovate[bot]	2cf53e3945	fix(deps): update module golang.org/x/oauth2 to v0.34.0 (#17 ) Some checks failed Build Docker / Create Docker Image (release) Successful in 1m32s Details Release / Tag release (push) Successful in 8s Details Release / Create Release (push) Successful in 3s Details Release / Publish Docker Images (push) Failing after 1m9s Details This PR contains the following updates: \| Package \| Change \| [Age](https://docs.renovatebot.com/merge-confidence/) \| [Confidence](https://docs.renovatebot.com/merge-confidence/) \| \|---\|---\|---\|---\| \| [golang.org/x/oauth2](https://pkg.go.dev/golang.org/x/oauth2) \| [`v0.33.0` -> `v0.34.0`](https://cs.opensource.google/go/x/oauth2/+/refs/tags/v0.33.0...refs/tags/v0.34.0) \| ![age](https://developer.mend.io/api/mc/badges/age/go/golang.org%2fx%2foauth2/v0.34.0?slim=true) \| ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/golang.org%2fx%2foauth2/v0.33.0/v0.34.0?slim=true) \| --- ### Configuration 📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied. ♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 Ignore: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi4zOS40IiwidXBkYXRlZEluVmVyIjoiNDIuMzkuNCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsidHlwZS9kZXBlbmRlbmNpZXMiXX0=--> Reviewed-on: #17 Reviewed-by: Luke Tainton <luke@tainton.uk> Co-authored-by: renovate[bot] <renovate-bot@git.tainton.uk> Co-committed-by: renovate[bot] <renovate-bot@git.tainton.uk>	2025-12-08 22:22:38 +00:00
renovate[bot]	cd5db40cdf	chore(deps): update actions/checkout action to v6.0.1 (#15 ) Some checks failed Release / Tag release (push) Successful in 10s Details Release / Create Release (push) Successful in 2s Details Release / Publish Docker Images (push) Failing after 1m12s Details This PR contains the following updates: \| Package \| Type \| Update \| Change \| \|---\|---\|---\|---\| \| [actions/checkout](https://github.com/actions/checkout) \| action \| patch \| `v6.0.0` -> `v6.0.1` \| --- ### Release Notes <details> <summary>actions/checkout (actions/checkout)</summary> ### [`v6.0.1`](https://github.com/actions/checkout/releases/tag/v6.0.1) [Compare Source](https://github.com/actions/checkout/compare/v6.0.0...v6.0.1) #### What's Changed - Update all references from v5 and v4 to v6 by [@ericsciple](https://github.com/ericsciple) in [#2314](https://github.com/actions/checkout/pull/2314) - Add worktree support for persist-credentials includeIf by [@ericsciple](https://github.com/ericsciple) in [#2327](https://github.com/actions/checkout/pull/2327) - Clarify v6 README by [@ericsciple](https://github.com/ericsciple) in [#2328](https://github.com/actions/checkout/pull/2328) Full Changelog: <https://github.com/actions/checkout/compare/v6...v6.0.1> </details> --- ### Configuration 📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied. ♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 Ignore: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi4zMC4xIiwidXBkYXRlZEluVmVyIjoiNDIuMzAuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsidHlwZS9kZXBlbmRlbmNpZXMiXX0=--> Reviewed-on: #15 Co-authored-by: renovate[bot] <renovate-bot@git.tainton.uk> Co-committed-by: renovate[bot] <renovate-bot@git.tainton.uk>	2025-12-06 11:03:20 +00:00