OIDC

[kloenk]

This is based on #3705 and contains ideas from #3170

Changes

Add OIDC support for user creation and login

Tests

• Automated tests have been added
• This PR does not require tests

Changelog

• Entry has been added to changelog
• This PR does not make a user-facing change

Documentation

• Docs have been updated
• This change does not need a documentation update

Dark mode

• The UI has been tested both in dark and light mode
• This PR does not change the UI

[kloenk]

the config :plausible, Plausible.Auth.OIDC, :site_membership_claim can now be a function that accepts a claims map and returns a list of either strings or a tuple of 2 strings, the first being the domain, the second being the role in that domain.

[CLAassistant]

Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
_{You have signed the CLA already but the status is still pending? Let us recheck it.}

[kloenk]

As part is taken from another pr I'm not sure if I can fully grant this rights. Sorry for not seeing the cla before

[ukutaht]

@kloenk Thank you for your contribution.

If I understand correctly, this PR will switch the login functionality for the whole Plausible application based on a config variable. This only makes sense in self-hosted / community edition for smaller teams since it treats Plausible as a single-tenant application.

The way I see it, we need to build team/organization accounts first and any sort of SSO features are a natural extension of that. Sadly this PR does not seem to fit into that story. Also sadly, team accounts isn't something we are tackling just yet. The plan is to work on this towards the end of this year.