feat(auth): add WorkOS and Keycloak SSO providers

2026-03-19 20:30:00 -05:00
parent 307bb427d6
commit 77ba13b41b
8 changed files with 454 additions and 83 deletions
--- a/.env.example
+++ b/.env.example
@@ -131,11 +131,13 @@ OTEL_SERVICE_NAME=mosaic-gateway
 # AUTHENTIK_CLIENT_SECRET=

 # --- WorkOS (optional — set WORKOS_CLIENT_ID to enable) ---
+# WORKOS_ISSUER=https://your-company.authkit.app
 # WORKOS_CLIENT_ID=client_...
 # WORKOS_CLIENT_SECRET=sk_live_...
-# WORKOS_REDIRECT_URI=http://localhost:3000/api/auth/callback/workos

 # --- Keycloak (optional — set KEYCLOAK_CLIENT_ID to enable) ---
+# KEYCLOAK_ISSUER=https://auth.example.com/realms/master
+# Legacy alternative if you prefer to compose the issuer from separate vars:
 # KEYCLOAK_URL=https://auth.example.com
 # KEYCLOAK_REALM=master
 # KEYCLOAK_CLIENT_ID=mosaic