Authorization-code flow with PKCE through an idp adapter (with a fake), ID token validation, identity and roles resolved from the directory with a short cache, refusal of unknown, disabled and locked accounts with one generic page, sessions that end when the account becomes unavailable, sign-out that ends the server-side session, role decorators and the trusted-proxy client address rule. Adds the OIDC_* and PUBLIC_BASE_URL configuration. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01N3t4WL7bd9bdHHNjEsxzqC
12 lines
408 B
HTML
12 lines
408 B
HTML
{% extends "accounts/base.html" %}
|
|
{% load i18n %}
|
|
{% block title %}{% trans "Welcome" %}{% endblock %}
|
|
{% block content %}
|
|
<h1>{% blocktrans with name=portal_user.display_name %}Signed in as {{ name }}{% endblocktrans %}</h1>
|
|
<p>{{ portal_user.user.sam }}</p>
|
|
<form method="post" action="{% url 'logout' %}">
|
|
{% csrf_token %}
|
|
<button type="submit">{% trans "Sign out" %}</button>
|
|
</form>
|
|
{% endblock %}
|