Maurice bfc857d246 feat(oidc): use the picture claim as avatar when none is uploaded ...

When a user signs in via OIDC and hasn't uploaded a custom avatar, their
`picture` claim is now used as their avatar. The users.avatar column holds
either an uploaded file name or an absolute https URL from the claim, and a
single resolver on each side (server avatarUrl, client avatarSrc) renders
both. An uploaded avatar always wins and is never overwritten; the picture
refreshes on each login otherwise. Only https URLs are stored, matching the
image CSP.

All the scattered /uploads/avatars/ builders now go through the resolvers,
which also fixes collection member avatars that were rendering a bare file
name.

Discussion #1399

2026-07-02 11:22:40 +02:00

..

oidc.controller.ts

feat(oidc): use the picture claim as avatar when none is uploaded

2026-07-02 11:22:40 +02:00

oidc.module.ts

Release 3.1.0 (#1185)

2026-06-16 22:22:45 +02:00

oidc.service.ts

Release 3.1.0 (#1185)

2026-06-16 22:22:45 +02:00