Register an OAuth2 application on git.kkhost.pl (/admin/applications/, callback https://flight.dev.kkhost.pl/api/auth/callback), then add lib/auth.ts + app/api/auth/{login,callback,logout}/route.ts: discovery-driven authorization-code flow (scope=openid, confidential client via env vars GITEA_ISSUER/CLIENT_ID/CLIENT_SECRET — the host already serves a live OIDC discovery doc at https://git.kkhost.pl/.well-known/openid-configuration), upsert player by sub, set httpOnly signed session cookie. Keep issuer/client config in env so swapping to any other OIDC IdP later is config-only.
Part of the #101 multiplayer plan.
Register an OAuth2 application on git.kkhost.pl (/admin/applications/, callback https://flight.dev.kkhost.pl/api/auth/callback), then add lib/auth.ts + app/api/auth/{login,callback,logout}/route.ts: discovery-driven authorization-code flow (scope=openid, confidential client via env vars GITEA_ISSUER/CLIENT_ID/CLIENT_SECRET — the host already serves a live OIDC discovery doc at https://git.kkhost.pl/.well-known/openid-configuration), upsert player by `sub`, set httpOnly signed session cookie. Keep issuer/client config in env so swapping to any other OIDC IdP later is config-only.
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Part of the #101 multiplayer plan.
Register an OAuth2 application on git.kkhost.pl (/admin/applications/, callback https://flight.dev.kkhost.pl/api/auth/callback), then add lib/auth.ts + app/api/auth/{login,callback,logout}/route.ts: discovery-driven authorization-code flow (scope=openid, confidential client via env vars GITEA_ISSUER/CLIENT_ID/CLIENT_SECRET — the host already serves a live OIDC discovery doc at https://git.kkhost.pl/.well-known/openid-configuration), upsert player by
sub, set httpOnly signed session cookie. Keep issuer/client config in env so swapping to any other OIDC IdP later is config-only.we wont use this flow - for now only add simple account creating in local DB
Closed per decision above — simple local account creation instead of OIDC; plan updated on #107/#116.