Homer Core 11.0.225
OAuth-only login for IdP deployments (Azure / Entra ID) and clearer docs for pre-provisioned OAuth users.
Authentication
- OAuth-only login: Set
coordinator.auth.disable_password_login: trueto hide the username/password form in the UI and return 403 onPOST /api/v4/auth/sessions. Pair withoauth2_provider.auto_redirect: trueto send users straight to the IdP. - Pre-provisioned OAuth users: Documented
coordinator.oauth2_provider.skip_auto_provision: true(login only if the user already exists in DuckDB, matched by username or email). - Azure sample: Added
examples/homer-coordinator-oauth2-azure.sample.json. - Docs: Updated
docs/AUTH_LDAP_AND_OAUTH.md,docs/COORDINATOR.md, anddocs/UI_COORDINATOR_AUTH_AND_TOKENS.md.
Configuration quick reference
{
"coordinator": {
"auth": { "disable_password_login": true },
"oauth2_provider": {
"enable": true,
"name": "azure",
"auto_redirect": true,
"skip_auto_provision": true
}
}
}Docker env vars:
HOMER_COORDINATOR_AUTH_DISABLE_PASSWORD_LOGIN=true
HOMER_COORDINATOR_OAUTH2_PROVIDER_AUTO_REDIRECT=true
HOMER_COORDINATOR_OAUTH2_PROVIDER_SKIP_AUTO_PROVISION=true
Upgrade
Install the homer-core package or binary built from tag 11.0.225 on branch homer11.
homer --version # homer-core 11.0.225