feat(auth): add IAS ECP SSO [skip ci]

2026-09-21 16:29:31 +02:00
parent 020619143e
commit 5a7f8e1a47
16 changed files with 888 additions and 15 deletions
--- a/.env.example
+++ b/.env.example
@@ -24,3 +24,11 @@ CORS_ALLOWED_ORIGINS=http://localhost:3000,http://127.0.0.1:3000
 LOG_LEVEL=INFO
 BACKUP_ENCRYPTION_KEY=
 BACKUP_KEY_ID=default
+
+# IAS ECP SSO (keep disabled without a mounted P-256 public key)
+SSO_ENABLED=false
+SSO_PROVIDER_URL=https://divopk.vniicentr.ru/sso-redirect/
+SSO_SERVICE_CODE=fkc
+SSO_ISSUER=dvr
+SSO_PUBLIC_KEY_PATH=
+SSO_SESSION_TTL_SECONDS=7200