v0.34.16

langs/en_US.json

@@ -857,11 +857,26 @@
     "aclNetwork": "IP/CIDR or DNS name",
     "aclAction": "Action",
     "aclAdd": "Add IP rule",
+    "authProvider": "Identity provider",
+    "authMethod": "Integration method",
+    "authForwardAuth": "Forward Auth",
+    "authPocketId": "Pocket ID",
+    "authCustomOidc": "Other OIDC provider",
     "authMode": "Authentication",
     "authNone": "None",
     "authTinyauth": "Tinyauth",
     "authAuthelia": "Authelia",
     "authAuthentik": "authentik",
+    "authOidc": "OIDC (central login)",
+    "oidcIssuer": "OIDC issuer (HTTPS)",
+    "oidcBackend": "OIDC internal service URL (optional)",
+    "oidcRedirect": "Application callback URL (HTTPS)",
+    "oidcClient": "Client ID",
+    "oidcSecret": "Client Secret",
+    "oidcSession": "RustProxy session secret (at least 32 characters)",
+    "oidcScopes": "OIDC scopes",
+    "oidcTtl": "Session lifetime (seconds)",
+    "oidcHelp": "Cross-domain central login using OIDC Authorization Code + PKCE. Register the exact callback URL with your provider. Requires trusted HTTPS, a session secret and a confidential client (client_secret_basic). Supported ID token signatures: RS256/ES256. Discovery endpoints must use the issuer origin. Application sessions are separate; RustProxy injects verified Remote-User, Remote-Sub and optional attributes.",
     "forwardAuthUrl": "Forward-auth service URL (internal)",
     "forwardAuthLogin": "Authelia public login URL (HTTPS)",
     "forwardAuthAdvanced": "Advanced provider settings",
@@ -1503,7 +1518,7 @@
     "vhBackendHeader": "Expose selected backend (X-RustProxy-Backend)",
     "vhBackendTimingHeader": "Expose backend response time (X-RustProxy-Backend-Time)",
     "vhBackendDiagnosticsHelp": "Opt-in response headers. Backend time measures origin request-to-response-headers latency; responses served without contacting an origin do not report a backend.",
-    "authModeHelp": "Choose one authentication provider. The IP access list below is independent and can be combined with either provider.",
+    "authModeHelp": "Select an identity provider and a supported integration method. Forward Auth checks sessions via the provider; OIDC uses central login with a callback on the protected application. Existing Vhost integrations remain supported.",
     "taAdvanced": "Advanced Tinyauth settings",
     "notfound": "404 hosts",
     "notfoundTitle": "404 hosts, under control.",