 Elias Schneider
|
34e9a6d198
|
fix: restore behavior that unknown scopes get ignored
|
2026-07-06 22:42:38 +02:00 |
|
 Elias SchneiderandAlessandro Segala
|
09d196f7c5
|
feat: add OAuth APIs with scoped permissions (#1542)
Co-authored-by: Alessandro (Ale) Segala <43508+ItalyPaleAle@users.noreply.github.com>
|
2026-07-06 12:25:02 -07:00 |
|
  github-actions[bot]andstonith404
|
0b2706a488
|
chore: update AAGUIDs (#1567)
Co-authored-by: stonith404 <58886915+stonith404@users.noreply.github.com>
|
2026-07-06 08:58:44 +02:00 |
|
|
Alessandro (Ale) Segala
|
eefd51cc4d
|
fix: various bugs in observability / OTel (#1564)
|
2026-07-05 14:14:39 -07:00 |
|
|
Alessandro (Ale) Segala
|
f68ad42618
|
chore: use go-kit for sending emails (#1565)
|
2026-07-05 13:10:11 -07:00 |
|
  
|
0d2624db9c
|
chore(deps): Bump the "all-dependencies" group with 3 updates across multiple ecosystems (#1563)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Kyle Mendell <ksm@ofkm.us>
|
2026-07-05 22:06:07 +02:00 |
|
|
9607495ab4
|
refactor: integrate Francis actor framework for background jobs, cron scheduling, and rate limiting (#1556)
Co-authored-by: Elias Schneider <login@eliasschneider.com>
Co-authored-by: Claude <noreply@anthropic.com>
|
2026-07-03 08:36:45 +02:00 |
|
|
Elias Schneider
|
931a6c2adb
|
feat: drop TOFU support for callback URL
|
2026-07-02 14:05:37 +02:00 |
|
|
Elias Schneider
|
ecad31cae2
|
refactor: migrate signup functionality to single usersignup module
|
2026-06-30 20:53:31 +02:00 |
|
|
Elias Schneider
|
58fcf7cbe6
|
refactor: migrate Webauthn functionality to single webauthn module
|
2026-06-29 14:05:07 +02:00 |
|
|
Elias Schneider
|
9fce987106
|
refactor: migrate API key functionality to single apikey module
|
2026-06-29 12:11:18 +02:00 |
|
  
|
97bd466f38
|
feat: prompt admin with PKCE client support hint (#1499)
Co-authored-by: james <james@goldfish.net>
Co-authored-by: Alessandro (Ale) Segala <43508+ItalyPaleAle@users.noreply.github.com>
Co-authored-by: Elias Schneider <login@eliasschneider.com>
Co-authored-by: Kyle Mendell <kmendell@ofkm.us>
|
2026-06-28 11:10:30 -07:00 |
|
|
Elias Schneider
|
d467855870
|
feat: add ability to skip consent for client
|
2026-06-26 23:35:26 +02:00 |
|
|
Elias Schneider
|
16b5c16a66
|
fix: CSP error with response_mode=form_post
|
2026-06-26 14:51:56 +02:00 |
|
|
Elias Schneider
|
2ed703540d
|
fix: don't reject offline_accessscope
|
2026-06-26 14:43:22 +02:00 |
|
|
Elias Schneider
|
e538ea0bf1
|
chore(deps): update vulnerable dependencies
|
2026-06-22 22:37:51 +02:00 |
|
|
Elias Schneider
|
8689ddd72b
|
feat: improve error handling on authorize page
|
2026-06-22 22:12:14 +02:00 |
|
|
Elias Schneider
|
519cda0eef
|
refactor: remove dead code
|
2026-06-22 21:58:55 +02:00 |
|
|
Elias Schneider
|
cf9a31986f
|
chore: wrap last two migrations into transaction
|
2026-06-22 18:44:48 +02:00 |
|
|
Elias Schneider
|
8158452b37
|
refactor: use fosite for OAuth 2.0 logic (#1520)
|
2026-06-22 18:42:02 +02:00 |
|
|
|
2e77d57282
|
fix: login code null submission and login code length check (#1512)
Co-authored-by: james <james@goldfish.net>
Co-authored-by: Kyle Mendell <kmendell@ofkm.us>
|
2026-06-20 20:42:50 +02:00 |
|
|
dependabot[bot]
|
f673a91a67
|
chore(deps): Bump the "all-dependencies" group with 2 updates across multiple ecosystems (#1528)
Signed-off-by: dependabot[bot] <support@github.com>
|
2026-06-20 09:58:24 -05:00 |
|
|
dependabot[bot]andlnx01
|
24c85029b4
|
chore(deps): Bump the "all-dependencies" group with 4 updates across multiple ecosystems (#1523)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2026-06-16 10:17:14 +00:00 |
|
|
Elias Schneider
|
8a75774971
|
fix: callback URL validation not validated if prompt=none
|
2026-06-16 12:02:57 +02:00 |
|
|
Elias Schneider
|
3d9d4de619
|
fix: PAR parameters not respected by authorize page
|
2026-06-16 09:29:34 +02:00 |
|
|
github-actions[bot]andstonith404
|
212c574a68
|
chore: update AAGUIDs (#1511)
Co-authored-by: stonith404 <58886915+stonith404@users.noreply.github.com>
|
2026-06-08 09:22:50 +02:00 |
|
|
Elias Schneider
|
4f97cd4188
|
refactor: fix linter issues
|
2026-06-02 14:08:33 +02:00 |
|
 Thibault NORMANDandElias Schneider
|
68a5abdcca
|
feat(oauth): add support for Pushed Authorization Requests (RFC9126) (#1404)
Co-authored-by: Elias Schneider <login@eliasschneider.com>
|
2026-06-02 14:02:12 +02:00 |
|
 Melvin Snijders
|
e88ff03ea2
|
fix: issues with loading new font (#1496)
|
2026-06-01 11:16:55 +02:00 |
|
|
Elias Schneider
|
7027296632
|
fix: restore cross-platform binary builds
|
2026-05-31 20:04:30 +02:00 |
|
|
Elias Schneider
|
e046a03364
|
chore: use fixed minor version of Go
|
2026-05-31 19:09:06 +02:00 |
|
|
Elias Schneider
|
bc4f75c44f
|
refactor: fix linter issues
|
2026-05-29 12:25:06 +02:00 |
|
|
Elias Schneider
|
a71219637a
|
fix: add support for unix socket mode in healthcheck
|
2026-05-29 12:11:26 +02:00 |
|
|
Elias Schneider
|
b3d40a476b
|
feat: improve design trough the whole application
|
2026-05-29 11:37:34 +02:00 |
|
 V
|
dd77bb0f32
|
feat: add support for systemd socket activation (#1479)
|
2026-05-29 09:18:29 +02:00 |
|
|
Elias Schneider
|
0c95b7c3cc
|
feat: add support for response_mode=fragment
|
2026-05-29 09:14:44 +02:00 |
|
|
github-actions[bot]andstonith404
|
f4a20e3ef9
|
chore: update AAGUIDs (#1487)
Co-authored-by: stonith404 <58886915+stonith404@users.noreply.github.com>
|
2026-05-25 09:20:32 -05:00 |
|
|
Elias Schneider
|
5db570bf66
|
feat: remove EXIF/XMP metadata from uploaded images (#1477)
|
2026-05-19 20:56:14 -07:00 |
|
|
Elias Schneider
|
9dd3d319cf
|
feat: delete OAuth refresh token on RP initiated logout (#1480)
|
2026-05-19 17:05:44 +02:00 |
|
|
Elias Schneider
|
cc9163f577
|
fix: make stream of downloaded logos seekable for S3 checksum calculation
|
2026-05-19 16:28:30 +02:00 |
|
|
Elias Schneider
|
b27a52a591
|
revert: delete refresh tokens on end-session to prevent reuse after logout (#1458)
This reverts commit 7aacbd0245.
|
2026-05-18 23:36:39 +02:00 |
|
|
Elias Schneider
|
8ad95b8af1
|
refactor: apply go 1.26.0 syntax updated
|
2026-05-18 23:06:54 +02:00 |
|
|
Elias Schneider
|
e56dc124ce
|
refactor: remove deprecated http2 package
|
2026-05-18 23:04:08 +02:00 |
|
|
Elias Schneider
|
91c2ea2a66
|
chore: upgrade dependencies
|
2026-05-18 22:55:00 +02:00 |
|
|
Elias Schneider
|
ce6bdb9d7e
|
fix: reject unknown PKCE code challenge methods
|
2026-05-18 22:07:20 +02:00 |
|
|
Elias Schneider
|
8b22fcaaa4
|
fix: add email_verified to reserved claims list
|
2026-05-18 21:08:51 +02:00 |
|
|
github-actions[bot]andstonith404
|
4abd1a5124
|
chore: update AAGUIDs (#1476)
Co-authored-by: stonith404 <58886915+stonith404@users.noreply.github.com>
|
2026-05-18 18:16:48 +02:00 |
|
|
Elias Schneider
|
714b5b3307
|
fix: return 404 status code for .well-known routes if not found
|
2026-05-18 18:15:54 +02:00 |
|
 wucm667andAlessandro Segala
|
7aacbd0245
|
fix(oidc): delete refresh tokens on end-session to prevent reuse after logout (#1458)
Co-authored-by: Alessandro (Ale) Segala <43508+ItalyPaleAle@users.noreply.github.com>
Signed-off-by: wucm667 <stevenwucongmin@gmail.com>
|
2026-05-15 21:25:40 +00:00 |
|
 
|
da3489cfa5
|
fix(oidc): fall back to Basic auth when PKCE puts client_id in body (#1466)
Co-authored-by: mgabor3141 <@mgabor3141>
Co-authored-by: Gabor Mezo <git@mgabor.hu>
Co-authored-by: Alessandro (Ale) Segala <43508+ItalyPaleAle@users.noreply.github.com>
|
2026-05-07 23:01:51 -05:00 |
|