The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Review	Updated (UTC)
docs	Ready	Preview, Comment	Jan 20, 2026 3:17am

Greptile Summary

This PR successfully removes provider-specific hardcoded OIDC logic (Okta, Auth0, IdentityServer patterns) and replaces it with a more flexible approach that supports both explicit endpoint configuration and standard OIDC discovery.

Key Changes:

• Added optional endpoint fields to registration schema (authorizationEndpoint, tokenEndpoint, userInfoEndpoint, jwksEndpoint)
• Implemented OIDC discovery fallback when explicit endpoints aren't fully provided
• Removed brittle URL pattern matching for specific providers
• Applied consistent changes across both the API route and database registration script
• Cleaned up unrelated code (removed unused shouldUseProxy, updated logger names, refactored getBaseUrl usage)

Issues Found:

• Partial endpoint configuration is not preserved: if any required endpoint is missing, discovery overwrites ALL endpoints including explicitly provided ones (see inline comments on route.ts:200 and register-sso-provider.ts:433)

Confidence Score: 4/5

• This PR is safe to merge with minor improvements recommended
• The refactoring successfully removes provider-specific logic and implements a more maintainable OIDC discovery approach. The logic issue with partial endpoint configuration is non-critical since the all-or-nothing approach is acceptable, though a fallback pattern would be better. The PR was manually tested with 10 OIDC providers according to the description.
• Pay attention to apps/sim/app/api/auth/sso/register/route.ts and packages/db/scripts/register-sso-provider.ts for the endpoint configuration logic

Important Files Changed

@greptile