OpenID Connect
As detailed in the Mnema guide, Mnema relies exclusively on OpenID Connect (OIDC) for user management and authentication. If you decide to disable authentication everyone will log in as User and has all roles
Access control is governed by granular roles. Mnema expects these roles to be present in the roles claim at the root of the identity token. Any logical grouping or mapping of users to these permissions should be managed directly within your Identity Provider (IdP).
Role Reference
The following roles must be assigned to users in your IdP to grant specific permissions within the application:
Role | Description |
|---|---|
| Permission to manage, edit, and organize content pages. |
| Permission to modify global server and application settings. |
| Permission to create and manage monitored series. (Legacy naming) |
| Grants access to the HangFire dashboard (@ /hangfire). |
| Permission to create new directories within the storage system. |
| Permission to configure and manage external service integrations. |
| Permission to subscribe to the calendar |