[FEATURE] Make Tinyauth an OIDC provider

[tobiasredel]

I would love to see tinyauth being able to act as an oauth provider to some of my apps to basically support SSO.
E.g. configure tinyauth as oauth provider to portainer, etc.

[steveiliop56]

This is planned for v5 : )

[pettijohn]

This looks like a great project and I'm delighted to hear that this is on the roadmap. A lightweight service (not Keycloak or Authentik) for homelabs to broker external OAuth (such as Google or Github) and also provide OIDC to self-hosted apps is a niche the community needs filled.

To add to the wishlist, I hope it can work with Opencloud. That means it needs to (a) support PKCE with a client ID but without a client secret (since Opencloud uses a SPA without a secret); (b) support user-specified client IDs, as Opencloud hard-codes client IDs for the apps; and (c) allow specifying CORS headers so that the token requests from the SPA succeed (lower priority since reverse proxy can handle it). https://docs.opencloud.eu/docs/admin/configuration/authentication-and-user-management/external-idp

[steveiliop56]

I think the PKCE stuff will have to be implemented later. OIDC is a bit complex to implement correctly and I would like to start with a basic server and we can add the rest of the features later.

[Mayurifag]

Tinyauth is already an awesome app yet making it an OIDC provider while hiding all the complexity for user will be great!

I already use tinyauth in my setup but now I want to have a one-time single sign-in and have a non-expirable cookie/session which will make me to forget about those nasty login pages at least in my selfhosted apps, -- and all of that without replacing tinyauth with authelia or other apps

Thanks in advance!! 👍🏻

[steveiliop56]

Implemented with #605! I am so looking forward to v5!

[jo-chemla]

Congrats on that, indeed very exciting feature for v5!