Fixed
- SSO stayed broken until restart if the OIDC provider was unreachable at
startup (#59). Discovery ran once at boot; when it failed,/auth/oidc
answered500 Unknown authentication strategy "oidc"until the process was
restarted (typical with Docker Compose starting mkcert-web before the
identity provider). Discovery is now retried when someone signs in with
SSO, at most once every 10 seconds, and until the provider answers the
browser is returned to the login page with a "provider cannot be reached"
message. The discovery request also has a 10 second timeout, so a provider
that accepts connections but never answers no longer stalls startup.
Added
docs/DOCKERHUB.md, the Docker Hub overview page.docker-build-push.sh
now publishes it, with the short description, after each push, and
--overview-onlyupdates the page without building.
Images
- Docker Hub:
jeffcaldwellca/mkcertweb:5.0.1(also5.0,5,latest) - GHCR:
ghcr.io/jeffcaldwellca/mkcertweb:v5.0.1