starred/windmill

mirror of https://github.com/windmill-labs/windmill.git synced 2026-08-18 16:02:10 +00:00

Files

T

History

Alexander Petric a89fcf72fa [ee] feat(scim): OAuth2 client-credentials grant for SCIM provisioning

Support OAuth 2.0 client-credentials authentication for SCIM provisioning
(e.g. Microsoft Entra ID) alongside the existing static bearer token, so
identity providers can use short-lived, rotatable access tokens.

Backend (EE companion PR modifies scim_ee.rs):
- Unauthenticated token endpoint POST /api/scim_token/token issues a
  short-lived scope:scim JWT via the client-credentials grant.
- has_scim_token validates SCIM JWTs (when OAuth is configured) in addition
  to the static token — fully backward compatible.
- Super-admin config endpoints (generate/rotate/disable) store the client
  secret hashed (SHA-256). New scim_oauth global setting is agent-worker
  blocked and live-reloaded.

Frontend:
- OAuth 2.0 client-credentials section in the SCIM/SAML instance settings:
  enable toggle, generate-secret (shown once), copyable token endpoint and
  client ID, regenerate/disable.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-07-14 10:36:08 +00:00

..

…

…

Playwright E2E (#7520 )

2026-01-22 16:20:01 +00:00

feat(raw-apps): runtime-error overlay + AI import-React instruction (#9966 )

2026-07-07 09:32:43 +02:00

chore: update vite to 8, vite-plugin-svelte to 7 (#8141 )

2026-02-28 07:50:31 +00:00

[ee] feat(scim): OAuth2 client-credentials grant for SCIM provisioning

2026-07-14 10:36:08 +00:00

fix: New tutorials (#7427 )

2025-12-23 18:19:30 +00:00

.devcontainer.json

…

.env

…

.eslintrc.cjs

…

.gitignore

internal: instant npm run check

2026-02-19 09:33:33 +00:00

.npmrc

chore: update vite/vitest to stable v8/v4 and remove legacy-peer-deps (#8349 )

2026-03-13 08:50:19 +00:00

.prettierignore

…

.prettierrc.json

…

.stylelintrc

…

brand-guidelines.md

add guidelines to claude.md (#7007 )

2025-10-31 07:41:39 +00:00

BUGS.txt

Final Svelte 5 migration (#8211 )

2026-03-05 18:11:40 +01:00

build_full_app_css.sh

…

bundle_graphql_worker.sh

…

CLAUDE.md

refactor: slim down claude instructions for lean context and fast iteration (#8136 )

2026-02-28 07:00:19 +00:00

Dockerfile

…

filterTailwindClasses.js

…

LICENSE

…

minifiedOpenflowJson.sh

feat: add ai chat schedule and trigger tools (#8961 )

2026-04-29 14:00:01 +00:00

NOTICE

…

openapi-ts-error-1758271586180.log

…

package-lock.json

chore(main): release 1.756.0 (#10062 )

2026-07-12 10:30:58 +02:00

package.json

chore(main): release 1.756.0 (#10062 )

2026-07-12 10:30:58 +02:00

playwright.config.ts

Playwright E2E (#7520 )

2026-01-22 16:20:01 +00:00

postcss.config.cjs

…

publish.sh

bundle oauth_connect.json into packaged components (#9535 )

2026-06-11 14:19:24 +00:00

README_DEV.md

feat: make nsjail available in all standard images (CE) (#7793 )

2026-02-04 18:48:16 +00:00

README.md

feat: SQL result_collection flag (#7041 )

2025-11-12 17:36:01 +00:00

res.json

…

serve_ui_builder.sh

nit serve_ui + workmux

2026-03-18 11:38:22 +00:00

svelte-fast-check.config.ts

internal: instant npm run check

2026-02-19 09:33:33 +00:00

svelte.config.js

feat(oauth): support per-provider sandbox URLs (#9358 )

2026-05-28 22:33:44 +00:00

tailwind.config.cjs

theme-aware prose palette for markdown in dark mode (#9971 )

2026-07-06 19:00:35 +00:00

tailwindClasses.js

…

tsconfig.json

feat: Data Pipelines alpha (#9193 )

2026-06-18 18:09:02 +02:00

tslint-imports.json

…

tutorial-system-guide.mdc

fix: New tutorials (#7427 )

2025-12-23 18:19:30 +00:00

use_latest_ui_builder.sh

harden UI builder artifact bootstrap with verified pinned metadata (#9189 )

2026-05-16 07:40:29 +00:00

vite.config.js

feat(frontend): restore raw app 'open preview in separate window' (#9765 )

2026-06-24 15:39:16 +00:00

README.md

Windmill frontend

The Windmill frontend written in Svelte 5 + Tailwind CSS

The frontend is under AGPL, see the LICENSE file at the root of this repo