feat(multi-tenancy): verify tenant via OIDC claim

When multi-tenancy is enable we now allow to specify an OIDC claim
against which the tenantid of the user resolved via CS3 apis is matched.

Partial: #2310
This commit is contained in:
Ralf Haferkamp
2026-04-01 13:23:59 +02:00
committed by Ralf Haferkamp
parent a1d4e86b96
commit 33f45fa965
5 changed files with 160 additions and 50 deletions

View File

@@ -366,6 +366,7 @@ func loadMiddlewares(logger log.Logger, cfg *config.Config,
middleware.SkipUserInfo(cfg.OIDC.SkipUserInfo),
middleware.UserOIDCClaim(cfg.UserOIDCClaim),
middleware.UserCS3Claim(cfg.UserCS3Claim),
middleware.TenantOIDCClaim(cfg.TenantOIDCClaim),
middleware.AutoprovisionAccounts(cfg.AutoprovisionAccounts),
middleware.MultiTenantEnabled(cfg.Commons.MultiTenantEnabled),
middleware.EventsPublisher(publisher),