Add OpenID/OAuth2 Role Mappings #5854

New Issue

GiteaMirror · 2025-11-02T06:38:22-06:00

GiteaMirror commented

2025-11-02 06:38:22 -06:00

Originally created by @ispringle on GitHub (Aug 15, 2020).

Description

I have my Gitea instance setup with OIDC and it works well. However at the moment anyone with an account in the realm Gitea accesses also has access to Gitea, regardless of their groups/roles/permissions. It's not a "break" for me as I don't mind providing Gitea access to all users, however I would like to be able to control it and especially control admin access or even organizational access from within my OIDC provider (keycloak in this case).

A lot of clients that use OpenID/Oauth2 allow to create roles and role mappings so you can assign a user a role in the identity manager and they automatically receive that role in the client application.

I am assuming that this would be a new feature request, as I haven't found this feature in Gitea, the docs, my web searching, or the code I've looked through thus far.

Originally created by @ispringle on GitHub (Aug 15, 2020). ## Description I have my Gitea instance setup with OIDC and it works well. However at the moment anyone with an account in the realm Gitea accesses also has access to Gitea, regardless of their groups/roles/permissions. It's not a "break" for me as I don't mind providing Gitea access to all users, however I would like to be able to control it and especially control admin access or even organizational access from within my OIDC provider (keycloak in this case). A lot of clients that use OpenID/Oauth2 allow to create roles and role mappings so you can assign a user a role in the identity manager and they automatically receive that role in the client application. I am assuming that this would be a new feature request, as I haven't found this feature in Gitea, the docs, my web searching, or the code I've looked through thus far.

GiteaMirror added the issue/duplicate label 2025-11-02 06:38:22 -06:00

GiteaMirror closed this issue

2025-11-02 06:38:22 -06:00

GiteaMirror commented

2025-11-02 06:38:23 -06:00

@Morriz commented on GitHub (Apr 19, 2021):

I believe this is a dupe of https://github.com/go-gitea/gitea/issues/10016

@Morriz commented on GitHub (Apr 19, 2021): I believe this is a dupe of https://github.com/go-gitea/gitea/issues/10016

GiteaMirror commented

2025-11-02 06:38:23 -06:00

@lunny commented on GitHub (Apr 19, 2021):

Closed as duplicated.