From f61a949df2e31cab3a38b8a7c91a5aae1547d21c Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Ivar=20Conradi=20=C3=98sthus?= <ivarconr@gmail.com>
Date: Wed, 20 Oct 2021 08:31:02 +0200
Subject: [PATCH] fix: add supprot for acr_values in OIDC (#445)

---
 frontend/src/page/admin/auth/oidc-auth.jsx | 26 +++++++++++++++++-----
 1 file changed, 21 insertions(+), 5 deletions(-)

diff --git a/frontend/src/page/admin/auth/oidc-auth.jsx b/frontend/src/page/admin/auth/oidc-auth.jsx
index dafd4a9207..8170e5df49 100644
--- a/frontend/src/page/admin/auth/oidc-auth.jsx
+++ b/frontend/src/page/admin/auth/oidc-auth.jsx
@@ -179,11 +179,8 @@ function OidcAuth({ config, getOidcConfig, updateOidcConfig, unleashUrl }) {
                 <h3>Optional Configuration</h3>
                 <Grid container spacing={3}>
                     <Grid item md={5}>
-                        <strong>(Optional) Enable Single Sign-Out</strong>
-                        <p>
-                            If you enable Single Sign-Out Unleash will redirect
-                            the user to the IDP as part of the Sign-out process.
-                        </p>
+                        <strong>Enable Single Sign-Out</strong>
+                        <p>If you enable Single Sign-Out Unleash will redirect the user to the IDP as part of the Sign-out process.</p>
                     </Grid>
                     <Grid item md={6} style={{ padding: '20px' }}>
                         <FormControlLabel
@@ -204,6 +201,25 @@ function OidcAuth({ config, getOidcConfig, updateOidcConfig, unleashUrl }) {
                         />
                     </Grid>
                 </Grid>
+                <Grid container spacing={3}>
+                    <Grid item md={5}>
+                        <strong>ACR Values</strong>
+                        <p>Requested Authentication Context Class Reference values. If multiple values are specified they should be "space" separated. Will be sent as "acr_values" as 
+                            part of the authentication request. Unleash will validate the acr value in the id token claims against the list of acr values.</p>
+                    </Grid>
+                    <Grid item md={6}>
+                        <TextField
+                            onChange={updateField}
+                            label="ACR Values"
+                            name="acrValues"
+                            value={data.acrValues || ''}
+                            disabled={!data.enabled}
+                            style={{ width: '400px' }}
+                            variant="outlined"
+                            size="small"
+                        />
+                    </Grid>
+                </Grid>
 
                 <AutoCreateForm data={data} setValue={setValue} />