From bed7e6f0e9353870a040c6afcab381c9e4deec24 Mon Sep 17 00:00:00 2001 From: Roman Dmytrenko Date: Thu, 28 May 2026 22:38:58 +0100 Subject: [PATCH] docs(v2): add use_pkce config for GitHub auth and document OIDC nonce field Signed-off-by: Roman Dmytrenko --- docs/v2/configuration/overview.mdx | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/docs/v2/configuration/overview.mdx b/docs/v2/configuration/overview.mdx index 5e03ea2..514c740 100644 --- a/docs/v2/configuration/overview.mdx +++ b/docs/v2/configuration/overview.mdx @@ -349,7 +349,7 @@ Authentication configuration controls how users and systems authenticate with Fl | authentication.methods.oidc.providers.[provider].client_secret | Provider specific OIDC client secret (see your providers docs) | | v2.0.0 | | authentication.methods.oidc.providers.[provider].redirect_address | Public URL on which this Flipt instance is reachable | | v2.0.0 | | authentication.methods.oidc.providers.[provider].scopes | Scopes to request from the provider | | v2.0.0 | -| authentication.methods.oidc.providers.[provider].use_pkce | Option for enabling PKCE for OIDC authentication flow | false | v2.0.0 | +| authentication.methods.oidc.providers.[provider].use_pkce | Enable PKCE with a cryptographic nonce for OIDC authentication | false | v2.0.0 | | authentication.methods.oidc.providers.[provider].algorithms | List of accepted ID token signing algorithms | ["RS256"] | v2.6.0 | | authentication.methods.oidc.providers.[provider].fetch_extra_user_info | Fetch additional claims from the provider's UserInfo endpoint | false | v2.6.0 | | authentication.methods.oidc.email_matches | List of email addresses (regex) of users allowed to authenticate | | v2.0.0 | @@ -367,6 +367,7 @@ Authentication configuration controls how users and systems authenticate with Fl | authentication.methods.github.allowed_teams | Map of GitHub organizations to teams that users must be members of | | v2.0.0 | | authentication.methods.github.server_url | GitHub Server URL (to support GHES) | `https://github.com` | v2.0.0 | | authentication.methods.github.api_url | GitHub API URL (to support GHES) | `https://api.github.com` | v2.0.0 | +| authentication.methods.github.use_pkce | Enable PKCE for GitHub OAuth flow | false | v2.9.0 | #### Authentication Methods: Kubernetes