Feature/support OIDC auth

api/authorization.yml

@@ -129,7 +129,8 @@ components:
         encryptedPassword:
           type: string
           format: byte
-
+        external_id:
+          type: string
     UserPassword:
       type: object
       required:
@@ -153,6 +154,8 @@ components:
         encryptedPassword:
           type: string
           format: byte
+        external_id:
+          type: string
       required:
         - username
 

api/swagger.yml

@@ -8,12 +8,11 @@ info:
 servers:
   - url: "/api/v1"
     description: lakeFS server endpoint
-
 security:
   - jwt_token: []
   - basic_auth: []
   - cookie_auth: []
-
+  - oidc_auth: []
 components:
   securitySchemes:
     basic_auth:
@@ -27,7 +26,10 @@ components:
       type: apiKey
       in: cookie
       name: access_token
-
+    oidc_auth:
+      type: apiKey
+      in: cookie
+      name: auth_session
   parameters:
     PaginationPrefix:
       in: query
@@ -587,6 +589,8 @@ components:
         state:
           type: string
           enum: [initialized, not_initialized]
+        oidc_enabled:
+          type: boolean
     AccessKeyCredentials:
       type: object
       properties:
@@ -1147,6 +1151,19 @@ paths:
               schema:
                 $ref: "#/components/schemas/CurrentUser"
 
+  /oidc/callback:
+    get:
+      tags:
+        - auth
+      operationId: oauthCallback
+      security: []
+      responses:
+        302:
+          description: successfully got token
+        401:
+          description: failed to exchange authorization code for token
+        default:
+          $ref: "#/components/responses/ServerError"
   /auth/login:
     post:
       tags: