Merge pull request #538 from luckyPipewrench/sso-upgrades

Multi-provider SSO with admin UI and SAML support

Gemfile.lock

@@ -216,6 +216,11 @@ GEM
     ffi (1.17.2-x86_64-darwin)
     ffi (1.17.2-x86_64-linux-gnu)
     ffi (1.17.2-x86_64-linux-musl)
+    flipper (1.3.6)
+      concurrent-ruby (< 2)
+    flipper-active_record (1.3.6)
+      activerecord (>= 4.2, < 9)
+      flipper (~> 1.3.6)
     foreman (0.88.1)
     fugit (1.11.1)
       et-orbi (~> 1, >= 1.2.11)
@@ -415,6 +420,9 @@ GEM
     omniauth-rails_csrf_protection (1.0.2)
       actionpack (>= 4.2)
       omniauth (~> 2.0)
+    omniauth-saml (2.2.4)
+      omniauth (~> 2.1)
+      ruby-saml (~> 1.18)
     omniauth_openid_connect (0.8.0)
       omniauth (>= 1.9, < 3)
       openid_connect (~> 2.2)
@@ -461,6 +469,8 @@ GEM
     public_suffix (6.0.2)
     puma (6.6.0)
       nio4r (~> 2.0)
+    pundit (2.5.2)
+      activesupport (>= 3.0.0)
     raabro (1.4.0)
     racc (1.8.1)
     rack (3.1.18)
@@ -615,6 +625,9 @@ GEM
       faraday (>= 1)
       faraday-multipart (>= 1)
     ruby-progressbar (1.13.0)
+    ruby-saml (1.18.1)
+      nokogiri (>= 1.13.10)
+      rexml
     ruby-statistics (4.1.0)
     ruby-vips (2.2.4)
       ffi (~> 1.12)
@@ -770,6 +783,8 @@ DEPENDENCIES
   faraday
   faraday-multipart
   faraday-retry
+  flipper
+  flipper-active_record
   foreman
   hotwire-livereload
   hotwire_combobox
@@ -791,6 +806,7 @@ DEPENDENCIES
   omniauth-github
   omniauth-google-oauth2
   omniauth-rails_csrf_protection
+  omniauth-saml (~> 2.1)
   omniauth_openid_connect
   ostruct
   pagy
@@ -799,6 +815,7 @@ DEPENDENCIES
   posthog-ruby
   propshaft
   puma (>= 5.0)
+  pundit
   rack-attack (~> 6.6)
   rack-mini-profiler
   rails (~> 7.2.2)