From 2000e9fa122e9bc4548ca0405fafcfb6d7f055b5 Mon Sep 17 00:00:00 2001
From: Kailash Nadh <kailash@nadh.in>
Date: Sat, 1 Jun 2024 18:02:30 +0530
Subject: [PATCH] Style and add OIDC logo to the login page.

---
 cmd/auth.go                                   |  49 ++++++++++++++----
 i18n/en.json                                  |   2 +-
 static/public/static/auth/auth0.com.png       | Bin 0 -> 2873 bytes
 static/public/static/auth/github.com.png      | Bin 0 -> 1151 bytes
 static/public/static/auth/google.com.png      | Bin 0 -> 1625 bytes
 .../static/auth/microsoftonline.com.png       | Bin 0 -> 199 bytes
 static/public/static/auth/oidc.png            | Bin 0 -> 1918 bytes
 static/public/static/style.css                |  18 ++++++-
 static/public/templates/login.html            |  11 ++--
 9 files changed, 65 insertions(+), 15 deletions(-)
 create mode 100644 static/public/static/auth/auth0.com.png
 create mode 100644 static/public/static/auth/github.com.png
 create mode 100644 static/public/static/auth/google.com.png
 create mode 100644 static/public/static/auth/microsoftonline.com.png
 create mode 100644 static/public/static/auth/oidc.png

diff --git a/cmd/auth.go b/cmd/auth.go
index 89d7b285..3ca81568 100644
--- a/cmd/auth.go
+++ b/cmd/auth.go
@@ -2,6 +2,7 @@ package main
 
 import (
 	"net/http"
+	"net/url"
 	"strings"
 	"time"
 
@@ -15,11 +16,19 @@ type loginTpl struct {
 	Title       string
 	Description string
 
-	NextURI         string
-	Nonce           string
-	PasswordEnabled bool
-	OIDCEnabled     bool
-	Error           string
+	NextURI          string
+	Nonce            string
+	PasswordEnabled  bool
+	OIDCProvider     string
+	OIDCProviderLogo string
+	Error            string
+}
+
+var oidcProviders = map[string]bool{
+	"google.com":          true,
+	"microsoftonline.com": true,
+	"auth0.com":           true,
+	"github.com":          true,
 }
 
 // handleLoginPage renders the login page and handles the login form.
@@ -33,11 +42,33 @@ func handleLoginPage(c echo.Context) error {
 		next = uriAdmin
 	}
 
+	oidcProvider := ""
+	oidcProviderLogo := ""
+	if app.constants.Security.OIDC.Enabled {
+		oidcProviderLogo = "oidc.png"
+		u, err := url.Parse(app.constants.Security.OIDC.Provider)
+		if err == nil {
+			h := strings.Split(u.Hostname(), ".")
+
+			// Get the last two h for the root domain
+			if len(h) >= 2 {
+				oidcProvider = h[len(h)-2] + "." + h[len(h)-1]
+			} else {
+				oidcProvider = u.Hostname()
+			}
+
+			if _, ok := oidcProviders[oidcProvider]; ok {
+				oidcProviderLogo = oidcProvider + ".png"
+			}
+		}
+	}
+
 	out := loginTpl{
-		Title:           app.i18n.T("users.login"),
-		PasswordEnabled: true,
-		OIDCEnabled:     true,
-		NextURI:         next,
+		Title:            app.i18n.T("users.login"),
+		PasswordEnabled:  true,
+		OIDCProvider:     oidcProvider,
+		OIDCProviderLogo: oidcProviderLogo,
+		NextURI:          next,
 	}
 
 	// Login request.
diff --git a/i18n/en.json b/i18n/en.json
index 382442b9..a993e649 100644
--- a/i18n/en.json
+++ b/i18n/en.json
@@ -596,7 +596,7 @@
     "templates.rawHTML": "Raw HTML",
     "templates.subject": "Subject",
     "users.login": "Login",
-    "users.loginOIDC": "Login with OIDC",
+    "users.loginOIDC": "Login with {name}",
     "users.logout": "Logout",
     "users.profile": "Profile",
     "users.lastLogin": "Last login",
diff --git a/static/public/static/auth/auth0.com.png b/static/public/static/auth/auth0.com.png
new file mode 100644
index 0000000000000000000000000000000000000000..3b2d8562d9dd443cf81e50cd9743413cc0caccdf
GIT binary patch
literal 2873
zcmaJ@cUY5G7Y{3n3JwIy5JO~rj0{GAKp2uBD?kw~vk;P(BuEA!Bq0b65TS@wKx8N)
zpj1(aj1obXfQ8}!8L~Hs3k-@Pqy2)d_WQ$r_j%s;j_3S-=XcIM_dYk-)BS+l7S$~v
z5J=A13F{^9?KZy6VDbMZHDXlUsjzWA?1PL@HkZHxK=vd?2mo=W5y*fSKp;g&v;)>4
zkdzM9+lTFgcS92yG#FvS2F9Z?#b^-7+Lp&85RU+CNC-ft(lOA5+6E|uO2R;YFvBD8
zOb38Mb>g#tgM4>yBL4`{k_5H2fmrj<Vgee#CO~+!aC#(~hk<_PMT^H9%Wx><vkChM
z2KtvMAG{~Tfx!YGC>X+sh(H)akVq5^i83`up$s9$2xBB1VGKuF8X23Qkq9)x9P)RA
zirukDp=d9x<KNE2GYpi%W;4-nIG4+XaZO+h7Fmq7wA|n@HZ~Gl7)3_Y*#w>uJ#ya{
z1}qRsWKo%HDuWK$U?hYvqSzRySn6Lf(3oFo>5+fuNt`h_kHCZ@VTg^Gz8K>1|KF5G
z`)VD@_5%LV`%U6V?`S3f_W~jrQ7oc(=R)^wxMHFmSO9^|V0kkb;a}3|Nnx-VkrW0K
zVvK|tL-g<jB9*?e@}JKTJRa>#k7N_*M8Fw~fr?3BR4NJWh{a(o%=hCENJ|SO66aun
zvNy*eux1XH_Kubo_6}dLSOzhQ2GH4Gu%v&mj{l0?C<hu->=_HNs2qUg$YRhSpQA=o
zzo7+Xg0Q!+bll)WeOt?4SkgDNe8$=%5dVsWi^ae<_V$1F`pc5IfHsC-OIJMkTKoWA
zT=6V%X}`ff?gN1~-EhX*d-Dc+{Aq5x4}4cIHE)q`r-_xPEO$<-9CQh@+pI_}gh-q^
zzBw73(iF5N=yFsGBO<RO*Ks*LY1aq)P&Wz^;W9<4jYX;7IZO5E^Aa_%34Sj%73YOh
zh3~YukM7jfT^_lNVWuU&8hyBG{p9u0dkYWqfAsV7>MDBif_k|rc<xG8R+9Fg*Gja`
zg@lBhS>}d^8-Cxab7P6WKG)gl$#QZ^x^NS$dR%8r7(q;Nu&6jX*Ll_Byzh|A4}O6*
zmH3!Xi!)HgDQ_>YrwI=SOZ7@kZ<DJ0%tRtlykUbEi8P(m8qx)w%DzTp%8)}b`NhT0
zjndmm!JjVtN*n6C+WjKDjTcH)3uwx|Zg@z_)ZBa_WCYJ$7#*3L&puQzYuJN(&8dBo
zD5tjK!|4(T1fur#_F!Fbp6IML*do66oJ|v07`yr*w`E+?l{KC6XJc!V)q|2INnuBx
zl%Kyp_o=+%ptp}tztcPS(8UPmMH}ha=g$v0J3C_x8{C-8w_{UNQxgG(_nH}ocN+Jo
zYHdFuZc8>cHmJ;^#l^+aw-XcQnLgw4a%ra<drN+Jr=+ZGX1EI2+uIjrj1_4yPlMYX
zAZBJ&xiiYL+qPZO*s~{fy1AL5*St$XRZC7{muCyL%5STyv9GW1?fn(TzYAItz?7XB
zX{TrHRRiJZ%)oM?P?(HULCUJ;<KFM+uZcQh)d9cSMF~xHB;NAeZl{s~B+D5UBsRW%
z%iJyM`jg-c#bD~vQCOUBW`Cz7zQ-ZIuy9{4_Fx%;6PJ^r=bD}`lk>}IJ9l??lMZ<P
z;gUD&>+8vt7!dINY3)sv0#!*OkvPGxi_1FWV4yAw9yog~=~jDBt%qI;`j?KAQk8ZJ
zl@WK=gqVW5I*gUJ_RPiZVvj4^wrnX+pD(;n>u~^zG5J*RUeReFGcywtT4Cun|Hr-$
zYN4T_roFwrSM2-&0I2&-)6>sy<#IP*mhHwLEc?~Z#MB}%obt{>+E6J)2ZiEvn$c~!
z^8qh9^fiV9KdR)*sYa`T(zid@!<GCG99|Z)@}An(0aXuZ8o)E(H?;G7Tem91b}v3E
zc-41X4dU89R1#=yanj(5JY|}8TtV0UsGi``qgd?I;o(dCDp}o2M;qnTG1TLZqu~CA
zW5@P9%E>u@UZjv*5fo%J*(7s`B6QftkeZ&IMLk6;X=-X76HC8PR>@<6l>J6K+lD~d
z+1ci;d>?IX?J?`<MXlkX`zK_>?;O2)zFHzJJ)PkkVKOy22~M6`EUj*l+M4Ah+%M(}
zAH8?iHL(G6Z29d(dPPM=oQv#fS}@2}-(y4No1yCJ^8S-GF(2pEZnZY+q!^(o({iVq
zo11lK67v!$eb-zs{^Ywis!1ojqpG=AcuS&9s7kn_;vWz&e7{CQ9i==oI1v`m2Li_v
zJYjYrA(M6ZT$G%E4(d;!-Q@^XFPhnjPa%WV{A6uy?eOixwQV&L!3w_uIle3kd#`*0
zPjufFjpqA2*6JP@$iCjA4;o?#?bS^A!#nj23|0^8gJjM3vYPRk13OD?Gk)JbC~b~w
zCv`)rjsawH^$Rw-*5#`7P~$n|dDLe5PwsfUj7wcbcVFLiq50-*H@Io}sV@V@=ei2b
zLL~Zb`I@Y(eR>D-(^ODUC{t2YjQ#lxd63@-%Jhlr)S3;(?%lBip$!fmtB(!p{z(|O
zzLJ@ckT7;RN_2)>xpYE1QLWN0{g>vheFx4ay_8v6TKcrVg@(#qSr$$8hE)yDhE}vD
zj(Iw^$qQPT@k(9A%|hXBMMYed)~=6>9$uqUc@yia9~GSR^m(I6#(J;Xl?2C~o8?pk
z;H2alO_pd9cQX^Fr?>olFqiXlmVfZskvU9WxMcbRCDXPVZO(Y(i6^J*9$&Ft$b4Nv
zesWS@U%&ob4ZRQ+F07DqySg$CTg_3oF3!lv@YkTnX6?0&Q*XNcY-HrJ%i4U<Ok$Zp
z!arcOQ5qG5Vb1bn(^MOy1Kh0znp`_8&T9(Gs8%4zM@PNvS&fT}d-!;nuoXoZQry~a
zt?^>VScI?$Y&ZYvmFt<Lq~-XnoY{xjTgcf5e%8P}pPn`q)c-Nhx<3TkrmG>i3pDNw
zphhJx-si`}JWJ=TG~|shEZCYD8y9fZZ@$)&|2@fTGElvAXRw4q|M+;hxux{k5YuE1
zu3edz+A?cv^<+50$?MRerR=Bo@2X@qaz+7=E>of80De{1q%>Jrcw*CbjkPo^*_D)<
z+7S8tvDHmQCn}XXQq+-~R9tKm^CA2Yg)(<*d5@&Z31=GZO-y}#eZ}Y>E04E@GtU*;
zbJ&hL>JEJV3Z9X&Nk=fVNZwW8cl+=d@wc<FXO2YwxPu|3gz#mORZFU?tI4H-wIA}l
zCJAca8Cn`dSZcBtM(cv^C~eObJjy8xu`(weh7m<%ggCP<B5(HU%cl5EBJrL2j1*8>
z4_0$wd9P_bqgR)Ng@xJds0b)9e3@VRbnPA|Z%ll!Ya*r|{HQ6?i!UFYoauFy6JJ__
z^78Ub59>Gw6$Z=i{1GFqtbrN6<SFt!e_5CTr}{UF=>rmp#D+{oU*oMAG=c__Qru4|
Sy6xI{%sS)Tv8DTiPyQF}Gv!qP

literal 0
HcmV?d00001

diff --git a/static/public/static/auth/github.com.png b/static/public/static/auth/github.com.png
new file mode 100644
index 0000000000000000000000000000000000000000..1fa19c55d2f71505edf0f4d70840e817e7861c06
GIT binary patch
literal 1151
zcmV-_1c3XAP)<h;3K|Lk000e1NJLTq002M$002M;1^@s6s%dfF000C=Nkl<Zcmdqn
z1F$Pe6vpw%efHY6ZQHhO+qP}nws#B9wr!gi-~QLBRM2O1dv>aRaZb<q!tNwUdRuns
zWmdx}xF4UPFD76P1aO+m&=;TLew>Wef~;-qbQN~T3m5@KGy*SRcU1Y@_%gT?qoIV1
z#+_K&r^Z*p<CqVnWIi6pO7+=zBV3KSP(7K8tI;U!=C?#Y$P@jrWg3m=a48l-o>_=X
zkV~rhX7~W|+y`hDck^w~4$6pjXcK4iU7?KWf;Lf`Z;tj*Mzu%tC~tV5KpFQ5a$y3v
z3i_Y8%G&()sD>)o4V&Xsyo>oz!sg>$oQln{8&p9xws&p52?j$IbSrY-#c&;_K{1<-
z>#$gnal1hk3`P@|0B(UCJXEH}Vt4|z5QNG24X@!|T!~8nPIDPv!*7@j0o0%t7ArH}
z!;phpDmA|b7C;V8bNtGD5>^fI9<(Y>!j=xVJq>cO0Be*h^gQHfKaXal`$3MLFI8j}
zEP@;z>`?%RK#mq+m10F6feg;@D1b8{gGY+Z?I%J8&v+ETGmybVG|De<5M<QFqX4=<
zMhE2=coQ;Mgl#+uU>hug4BpHyFaa{S*~3NIn;?S;|J-qX$Y3m*dKf@cjDZZ+4>&jn
zGPuFxrTH5mgL4879)%3n^f-XEAcIE(4!(gLjSf8Dj4y+40uBa2j(*HQ06#*G1_c~U
zh8(?>fdJly98C$FXMezJ83^Dt$kBqpy1tfy06v9W83M@6d%#cD0OmoChGZasA&{ea
zfpHdCjb<J<-wf4|qlsZ=QagJbz%J$)Ee9V#2KRX!z<rRxM*#<SKnBB5<>`NuhCv2*
zgk20d&cgtX3$-Z1!7`B1P&D_b`Q{h~87&iKN$Dkz0(dFXlAis20KiQiG=B>e!X5cV
z)`LQN0Zr@aGyerBr1c65c7Q?}goBYw>5p26V+a&dhhl|Kfr|JUJL6EiP+|7i3zuTG
zgjRd5LO&>?Q;H4H5Tl?1qp?BW?bdPJiQ#w+SK$yeF*Mr>N8={EgE3G{MxkM;fzO4C
zn2VG1ZnrcBLylfY&iFKc1xmoV<pyquJ}$opa(ZjjLKRF!>kv=*)|djts1F)e8hB5r
zgarjJhg+RiUQL_*j}HcWx(@t2RKhm}Pt|*%G7gLo!2VE7p0^C#vckvACIz?O7H?uO
zW?(2j!YODHA%HcY7z{y6>);z<4phYZDSg>l42ozDHVV4~N0fP^J3Ipc)Z&P!J8=$F
z#5^47c>w3cwIi26C47kOkn=2nOXA*{lPfGZPR6hJ3}2uFW?-?D1E|KyNj)WZ#YD&;
z%>X81*QDQ=R>ZF!2JkCZOlvNl!-bgRK>%}bF>>{>8nXgkK^;`WauMn;4V6%bSFwT*
zYjPXlbu5AkEFGclQc!_vyp9cg{9$4RT!#S=-ie{+I}iroI{ZE=#`q{01pu+n%tOqP
Rd2;{&002ovPDHLkV1i^k^r8R&

literal 0
HcmV?d00001

diff --git a/static/public/static/auth/google.com.png b/static/public/static/auth/google.com.png
new file mode 100644
index 0000000000000000000000000000000000000000..389c1cd54ca90f24fe3643ca864f8ff005fd5cd1
GIT binary patch
literal 1625
zcmV-f2B!ImP)<h;3K|Lk000e1NJLTq002M$002M;1^@s6s%dfF000IcNkl<Zcmd^`
zbG#er7sh|T-L1K{ZDr=7?nE_$wQbu7YTJ%#+qP}T_kJeL^}FYEC;O?BQ8Lr}$G7fG
zo+sx$?{fzKGko4$Rst<^YXo$3;{Zed;Ad!$pP}Xfn}NeX94G?9`1^pCT6g;2Xem4V
z`o)mG-tBUKK3NVL)Mh;lLY$n?Qh<nHKOC!%Uq{s^g#2Hz286ZRS^+Kn5q#iP0FjBq
zP#r%-o7bzY7z2ozsRY8m=E|6)2^Q#xMr6!@gTsEi0@mpp+*&3XA^_&Ui%TP|2KWv2
zZswX9Q33&mnkuv!_>0$OHHDM<0irPW`I(%jWi^27>_oxDaal@i0Jq*5x<8&o1+Y<l
z_I;8WKrEIk;h@9SA|CUCWEFtj6&lPKm59#^>2q==?Ex5HRU$qT)MwL@?gAk#WxyCK
zLx7nD^z>`#-!M4>?{Yz^BW`E7xAQz^*l);wM$#M*(b0EHmh7}t6gqQfEKl<8yA@LD
zIXFCF{)hj6BFXXnVPn=4k|#m#TOuOy<2Ot!4XTTZ**f}LH1Pt*KM^uek4heeVUlYr
zQg|7Z@<7;%u90eB$v4)$9+u3=Gm_u2fG+C+$%i3g$*uw?I3Q+?2XxsjWV^P&(4S)B
zOYHNK8<6+*BVUTh<Hr)sNKO)cL~;YjvfHW@&#4fI^}TMsfbJhol%%>i!+?@G72XB|
z2vRhm%GzLyr-LbqFM?**5Raj11B&NV+=Sx)V`hb;(YGGnoXh}Rm-zoxZ2(zN;b|0o
z0SZ~$tqU(<z$zS+RBu4ZoQl7q;EPe{uDK*&)WpsaUz(V|Rc`=@Tmz6xGNaPYp!M-H
zwn%y${$JG_K;~4t5e245Ui9mGR-gfi#;10$`87dtJSdCzz22>Q@f^7Rze8a>=`7U;
zXl!G*WP+yc*_#p-Fp9SU^D4HI&;XJN7)M<DuK{x_tmJC|SyuBJbsGTKW1n*sP+=!e
z1M=`cs=fkjY>z|*oaAZ1ZnYc0F*;EJg***ddYKq7v0NL#*kaSl^%7w0?D+EC1nuky
z;oIQ+>epQc2J{sggn)`>^*6zoT}%}2rT!qqz9n=RBAq8bHBPDrmUJCRHL)=E*dGF-
zaKkgl;j&bO=g+R3-^OQLs&Sc!#%pS#l!*??c?$0e=oGt^*9DR7v##5n<7%_#w0OjA
znyLix=6<9S2#WBG!AE#q5*sz;!6hJ?1;`ncX<Sw+(+1#L78rw*Ulc8vQ?cmXu?^>;
z;0xk5t+jY8S7u5)_8}0njjsV(TkM0Rm&K3Gu6eAXr{x9|dMPN6`OA!b`wsSXzT$y0
zt@G3!m%K4Df7%^u;M+Zc0#l%f_E;LHTfDJ-{9X`~FCYLdy5y~~KPPDBfT$9H@E}5a
zpL;M};y;;2t^_eF0V1OO&oF?)I#%}~3K9fV4COV;esi>WKT=i5w#SjLb&^^aHNZ0C
zt%@LK7eEBUYCM*fvWf3VuETF$#0cz6`hWxm926sxLD?S5HByR)&y`!R$Mi`e;%~gM
zjog^j00hc;vIHia1U{@g_T}ngghPY9n{t^)VD11)a|d>skDZ*a0T`E4enu$U_x$Z}
zGCx2hAPR<d!fz0lSSq4(ea~O7ahac|+@{%_aB?Qp$hTKDa-QIm{`O#EOxXY=%WG<w
z*bO9v1!e&~K;Um!A&?{92ZMe<li>HGfjy}li*i{H)$hE1dn)_B&d%xuJt&DG2T!J8
z;&u8AUzDWuZK9qPhLa2dh?2<~_T{2R_DK8!GyfdS45AFc2OzMk14P-pxUFHky@$@Y
z;<G{Di6q^LQXV>R-2z16MCx^)wF+;38g1ly$zPa&M)g;sD=QVsWm=%?z2OGgUYUXJ
zYrs8Tf#S;m2ae~mzciIK@%bBZJ5!MO5Co=XX?<-D`vUDUzX~Tmm{IYNS~0j~?8Qk;
zcU)cwrMKM8KAb)k^XjbDW2uG74p=Fp@DgA&<uyI3=$EJQ;s`b*U=vU(Ha^2JG!5p0
zcW_2f#oOa&g3};gGQ+%&WsBPsXUtLH6i@_2@%JEdGdGF$z!@RiWqqc>{NJvU^Yi@!
Xcf1=#ExaOi00000NkvXXu0mjfwHywk

literal 0
HcmV?d00001

diff --git a/static/public/static/auth/microsoftonline.com.png b/static/public/static/auth/microsoftonline.com.png
new file mode 100644
index 0000000000000000000000000000000000000000..168a9c81395d5ab507ff3ec1ecfbceccfd8b89dc
GIT binary patch
literal 199
zcmeAS@N?(olHy`uVBq!ia0vp^4j|0J3?w7mbKU|e^#Gp`SN8%Rh9w^wb}{_l$?z#a
ziDBvcdN_N@d!QhY3lx9NT&V}t!dVjJ7tHV;2p#}|05kJ(prD(li(`m~cd|t@Q=frB
z#(OtLp2b{lqCHv?bGTvx8rYegCkb&SNbooauyz<3h)6GHXq%~#pv2sKRZGNRRYJ(Y
e6-@_MGBEgft<)^auj&Ju$l&Sf=d#Wzp$PyW-9QKc

literal 0
HcmV?d00001

diff --git a/static/public/static/auth/oidc.png b/static/public/static/auth/oidc.png
new file mode 100644
index 0000000000000000000000000000000000000000..7b53d129f9569e45fafc481fb10f7420c9bd8742
GIT binary patch
literal 1918
zcmV-^2Z8vBP)<h;3K|Lk000e1NJLTq002M$002M;1^@s6s%dfF00004XF*Lt006O%
z3;baP0000WV@Og>004R>004l5008;`004mK004C`008P>0026e000+ooVrmw00006
zVoOIv0RI600RN!9r;`8x00(qQO+^Rg0t*!;5tJV`y#N3PT}ebiRCwC$+j(qUR~5(c
z&y2@$Ham^eBn?eNTG|-W7A2@nOBxUnYN@Cg)&de$*#%Ms;y?C9>}5$M;19$is#1_b
zQz0II@CQxVqzFQy7DGeT3J9fjiO50{JKksb<Ge}6ZtR(H?0L5FPZ}wT-n;Ld@4ffD
zbI*BZLI2;%Wo<yU`oFoM^3PVR#Bq!)`M^^%_RK=oPLFfG4cFow7{aH}JCo1N96;*$
zVr<77@mgGpJ({pWGXs!1z8u@|cHD~9RZf?iVMkK|q)z9=jK36j;x=5|Ogl0Ikg6RY
z$Gft0yrO&t&+NdC+2DLu0A`gI0Ay`I)>;6NwE<ac0YKIUWUU1NSsReG764>zK-QY}
z!%&hW#EGv}<o#VJ;o#|>FAlX2_cSzK&$1gN$+wo_#TdXp(1#I}i^XF008*!0aTzYh
zR@{geVGVwX_xHB0YZ$=EwvDg?pHIj8H~xeJ=uVR4Z#aU{slb>rfYj-NC}Qlu&eZ8H
zEFE|GGLUP$z*CO;NDdcaUHaQ9%4R3gjs4i0B*}i9KxrZvRg*P}Qo{h!0oqa{Zo})a
zQB-%Dtrd8gn1J`-&v+0IB}wu)Mk*kxwq}<oz5Nu2>IRSwusC)6op`mV-OUE&QW!f#
zZShI`9QUOlhH(krA__5AifvRIK<YSb!F%y0V{3N}7&(<1XT$g8#Vl{a?f3!yDe8{f
zv8W2j<S`(1z7uc82SpHSR70Y^KbkKOH+*xxJVfl*V<Pg`yJ~ZIK0cY+uw)#hjtK!&
z&H5&MA_dUafZc<50>8l@@dun)Iq+n|050wQy?=G=Jc<vCAiGU0^^JAHXc^~x<^R^7
z7eMNK9yj6ZxK91+@LBv$)btPF84OhdQB~)sZnY0TqgX7CBuVlJ9>Klhb$gSTm>b0#
zqEW4S4uGmi`5N3U_EJ6iFMfji#cU73g(fN0sv4_5Ns=eT3VRSQ7u)mZ28ZlK?ks>R
z=XZ*ke?c9CjNrG}g<s*!bUHm5jMUx{0ekTjhH1yj@mt^;e6>#JPvZNy2TwP{an4TE
zBGE&<OSIBDr!dq~bQG!vy;uaim(+3d5qws>V)~onxiPuOo%pB-gi}=qItx`1|8~?f
zjVJJFG5aIUn)z`$h>wV*Y^z9YR-{g~);Y$QEpP?ir}kbN!8b%CZo2d7^9FD*Ns@yi
z2rd#^pi6AwYf~Usie#r{g5j26c?H0&xVjD-9>%vZn9<CShcS}=&fw`JN%o3-rBh_9
zmx~N`tB7l>#fKM*#EMy65GS=)shw1u!gs}SbXF>bGAQzqXOkr9M&jJ5byNE5O2M2e
zh?%b^#qAd7`e}W?Hvvdl<o-SANs{E(B2HX{{sOKNnN=-4jMG^=HBC^4@gL3|3Tg$v
zvN%4LvUXs))ksnF6mw_!&jf%r#+(%Ah4RwsYK`l1;=MZWlo!>KBXwL`siw>;<?%QU
z*KzF)*qpV&GXdZ!?5pG24dM{8cs|8}N)X(wc7~V3+caKynANHP=oV$HT3REH!Ph5A
zGB4f;6#xU`kkehqJzMZ4aln}K$`^~pN^<j<D21J<<GxqoJGdoDl9su=62>P&58!L!
zcv(x=;d}TH*38u{aTY+j3i?IC<13;CT}zkYbNC_NfK_u1#F!P3Lg*D+;cij*tfeKm
zC53P=-YQl^elCDGZ^I)se5q(AeoSL&aIdJ@{{nmQckzlHy!r55L`P<KIhWgBqucTT
z-i^~U`6n|I+ECRY+AjKQuh4iZ+=oN>D-M+u9(!KzzR}IcfBc!2((tw#-wR|5pbA0`
zYjH<vP*<({CeUb^zCx*g_?n~lEnj=)(YA7~WwPs=0$|ePaQccYizR%ID4p*T>GNoV
z&uT#j`BkM{p;n{yl<4s{-cFuQ0M#H;hyNlP5=DGLG%FhgF`15vV0s6>EDD@6sww?d
zR@L`G8$@^Z^&&4=<GJ4lomCly(xA=9?zgV*fOHF#L>KuX=bEd1Gr8<97{E9XIT0MM
z5WV~B#V2i7i^}WSRdyZ#hw(G~2#-pae6yUtU;q;UX%&6OOGKyUDiJu>mswFL4Ya@T
z`0n2Iz5Di*a;<yBULR<t(=!HO0wB5c*H)HW(>mI>c3t28V_OdIIy|sq!)R8HFK9ub
z{{dLL)eHD|asL1S03~!qSaf7zbY(hYa%Ew3WdJfTGBGVMGA%JNR5CF-GdMaiH!CnO
zIxsN#4qMy+001R)MObuXVRU6WZEs|0W_bWIFfuVMFfuJMF;p@!Ix{#rF*hqPFgh?W
zh*RTW0000PbVXQnQ*UN;cVTj606}DLVr3vnZDD6+Qe|Oed2z{QJOBUy07*qoM6N<$
Ef>9}Yp8x;=

literal 0
HcmV?d00001

diff --git a/static/public/static/style.css b/static/public/static/style.css
index 8808c4b5..a47267c3 100644
--- a/static/public/static/style.css
+++ b/static/public/static/style.css
@@ -87,7 +87,8 @@ input[disabled] {
   color: #0055d4;
 }
 .button.button-outline:hover {
-  background-color: #0055d4;
+  border-color: #333;
+  background-color: #333;
   color: #fff;
 }
 
@@ -181,6 +182,21 @@ input[disabled] {
     font-weight: bold;
   }
 
+.login .submit {
+  margin-top: 20px;
+}
+  .login button {
+    width: 100%;
+    vertical-align: middle;
+    display: flex;
+    align-items: center;
+    justify-content: center;
+  }
+  .login button img {
+    max-width: 24px;
+    margin-right: 10px;
+  }
+
 #btn-back {
   display: none;
 }
diff --git a/static/public/templates/login.html b/static/public/templates/login.html
index 596ca2f3..b8b8524a 100644
--- a/static/public/templates/login.html
+++ b/static/public/templates/login.html
@@ -1,7 +1,7 @@
 {{ define "admin-login" }}
 {{ template "header" .}}
 
-<section>
+<section class="login">
 	<h2>{{ .L.T "users.login"}}</h2>
 	{{ if .Data.PasswordEnabled }}
 	<form method="post" action="" class="form">
@@ -19,16 +19,19 @@
 
 			{{ if .Data.Error }}<p><span class="error">{{ .Data.Error }}</span></p>{{ end }}
 
-			<p><button class="button" type="submit">{{ .L.T "users.login" }}</button></p>
+			<p class="submit"><button class="button" type="submit">{{ .L.T "users.login" }}</button></p>
 		</div>
 	</form>
 	{{ end }}
 
-	{{ if .Data.OIDCEnabled }}
+	{{ if .Data.OIDCProvider }}
 	<form method="post" action="/oidc/login">
 		<div>
 			<input type="hidden" name="nonce" value="{{ .Data.Nonce }}" />
-			<p><button type="submit">{{ .L.T "users.loginOIDC" }}</button></p>
+			<p><button class="button button-outline" type="submit">
+				<img src="{{ .RootURL }}/public/static/auth/{{ .Data.OIDCProviderLogo }}" alt="" />
+				{{ .L.Ts "users.loginOIDC" "name" .Data.OIDCProvider }}
+			</button></p>
 		</div>
 	</form>
 	{{ end }}