Refresh OAuth2 tokens automatically#8355

Merged

alexey-tikhonov merged 17 commits intoSSSD:masterfrom

eisenmann-b1:oauth2-cache-and-refresh-tokens

Apr 14, 2026

Commits on Apr 14, 2026

config: add missing rules for idp options

eisenmann-b1
authored and
sssd-bot
committed
oidc_child: get refresh_token for later

eisenmann-b1
authored and
sssd-bot
committed
oidc_child: store tokens in cache

eisenmann-b1
authored and
sssd-bot
committed
oidc_child: add --refresh-access-token flag

eisenmann-b1
authored and
sssd-bot
committed
idp: automatically refresh tokens

eisenmann-b1
authored and
sssd-bot
committed
idp: add option to automatically refresh tokens

eisenmann-b1
authored and
sssd-bot
committed
idp: delete non-replaced tokens from cache

eisenmann-b1
authored and
sssd-bot
committed
idp: construct pam_data with timer

eisenmann-b1
authored and
sssd-bot
committed
oidc_child: url-encode post data items

eisenmann-b1
authored and
sssd-bot
committed
oidc_child: free json objects properly

eisenmann-b1
authored and
sssd-bot
committed
oidc_child: add macros for token names

eisenmann-b1
authored and
sssd-bot
committed
idp: pass sss_domain_info to create_refresh_token_timer

eisenmann-b1
authored and
sssd-bot
committed
idp: fix idp_id_scope Entra example

eisenmann-b1
authored and
sssd-bot
committed
oidc_child: initialize curl only once

eisenmann-b1
authored and
sssd-bot
committed
fix typos

eisenmann-b1
authored and
sssd-bot
committed
fix gcc warning

eisenmann-b1
authored and
sssd-bot
committed
add config option to enable logging sensitive data

eisenmann-b1
authored and
sssd-bot
committed