portal: authenticate against Better Auth (public+PKCE); admin via email allowlist

Browse Source

Drops Authentik OIDC + the groups claim. Public PKCE client (Better Auth hashes
confidential secrets), scopes openid/email/profile, admin determined by ADMIN_EMAILS.

...

This commit is contained in:

Chris Farhood

2026-07-05 22:14:43 -04:00

parent 3908251f6e

commit c6c602fd20

4 changed files with 24 additions and 16 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

.coverage

BIN

Binary file not shown.