606 Commits
Author SHA1 Message Date
8c095afd78 refactor: migrate SCIM sync to actor + add tests (#1680)
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
2026-08-18 21:54:06 +02:00
Elias Schneider a487c78550 feat: reduce one time access code length for better UX 2026-08-18 21:31:22 +02:00
Elias SchneiderandGitHub 915a6bcf08 feat: allow admins to auto grant APIs to CIMD clients (#1692) 2026-08-18 20:02:14 +02:00
Alessandro (Ale) SegalaandGitHub be4c395528 refactor: move remaining database cleanup jobs to actors (#1698) 2026-08-17 08:38:35 +02:00
0e8ae3b1c7 chore: update AAGUIDs (#1696)
Co-authored-by: stonith404 <58886915+stonith404@users.noreply.github.com>
2026-08-17 08:35:16 +02:00
Elias Schneider 9421d43f8e fix: ignore trailing slash in resources 2026-08-17 08:34:28 +02:00
Elias Schneider 07580d9f9f chore(deps): use fix version for github.com/italypaleale/go-kit 2026-08-16 23:24:37 +02:00
c7cab3af84 chore(deps): Bump the "all-dependencies" group with 4 updates across multiple ecosystems (#1693)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Elias Schneider <login@eliasschneider.com>
2026-08-15 01:17:57 +02:00
Alessandro (Ale) SegalaandGitHub 2dc062ac0f refactor: move API key cleanup job to actor (#1687) 2026-08-15 00:39:02 +02:00
Elias Schneider 1bb21c5d73 refactor: move iss param handling to Fosite 2026-08-12 23:25:35 +02:00
46b8d54e15 feat: serve RFC 8414 authorization server metadata (#1685)
Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com>
Co-authored-by: Elias Schneider <login@eliasschneider.com>
2026-08-12 23:13:05 +02:00
Anthony ClericiandGitHub 86cf73b86c docs: add error responses to openapi spec (#1684) 2026-08-11 19:26:48 +02:00
Alessandro (Ale) SegalaandGitHub 155a1fcba0 feat: support multiple client secrets per OIDC client (#1679) 2026-08-11 00:54:52 +00:00
Elias Schneider 3ca9a55c71 feat: hide apps without launch url on My Apps page 2026-08-10 22:53:35 +02:00
Alessandro (Ale) SegalaandGitHub 84a58cd757 fix: ignore unsupported grant types in client ID metadata documents (#1682) 2026-08-10 09:45:34 -07:00
e21202e59b chore: update AAGUIDs (#1678)
Co-authored-by: stonith404 <58886915+stonith404@users.noreply.github.com>
2026-08-09 23:41:54 -05:00
Alessandro (Ale) SegalaandGitHub 875e7f0848 chore: update Francis to beta 22 (#1676) 2026-08-09 15:45:09 +02:00
Elias Schneider 0c9a03e519 feat: add animated logo as default logo 2026-08-08 20:50:37 +02:00
Elias Schneider 9e637d5aec fix: improve validation of app config variables 2026-08-08 16:37:14 +02:00
563c0f93a6 refactor: migrate LDAP sync to an actor (#1651)
Co-authored-by: Kyle Mendell <kmendell@ofkm.us>
2026-08-07 09:18:30 -07:00
Alessandro (Ale) SegalaandGitHub f8db1d8a86 chore: update francis to beta 21 (#1669) 2026-08-07 15:40:14 +00:00
dependabot[bot]andGitHub 42626c50e4 chore(deps): Bump the "all-dependencies" group with 3 updates across multiple ecosystems (#1668) 2026-08-07 17:22:59 +02:00
d6a47243db feat: add settings for limiting what passkeys can be used (#1662)
Co-authored-by: Alessandro (Ale) Segala <43508+ItalyPaleAle@users.noreply.github.com>
2026-08-07 11:17:38 +02:00
448d271c94 refactor: fix formatting (#1666)
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: stonith404 <58886915+stonith404@users.noreply.github.com>
2026-08-07 08:26:45 +02:00
Elias SchneiderandGitHub 535e831b20 fix: brotli compression ignored (#1661) 2026-08-07 07:16:02 +02:00
06ccadfcd0 fix: separate TLS inputs and preserve certificate reloads (#1653)
Co-authored-by: Alessandro (Ale) Segala <43508+ItalyPaleAle@users.noreply.github.com>
2026-08-07 00:32:08 +00:00
Alessandro (Ale) SegalaandGitHub 1f9cc5e58e fix: in non-HA mode, increase AlarmLeaseDuration (#1660) 2026-08-06 20:16:48 +02:00
Alessandro (Ale) SegalaandGitHub 22e3909c6c refactor: move GeoLite to its own package (#1647) 2026-08-05 22:12:19 +02:00
Alessandro (Ale) SegalaandGitHub 1c9233c236 fix: make OIDC client token lifetimes optional (#1650) 2026-08-05 20:11:40 +00:00
Elias Schneider 95809dd29c tests: remove invalid unit test 2026-08-05 22:01:43 +02:00
08407ae564 feat: include Francis data in Pocket ID backups (#1645)
Co-authored-by: Claude <noreply@anthropic.com>
Co-authored-by: Elias Schneider <login@eliasschneider.com>
2026-08-05 19:57:38 +00:00
Elias Schneider 140b5d3cb4 fix: don't skip rate limits for loopback addresses 2026-08-05 21:49:05 +02:00
Elias Schneider 488c50ef95 fix: respect log level in HTTP request logs 2026-08-04 23:12:22 +02:00
Alessandro (Ale) SegalaandGitHub a526206669 feat: add observability to actors (#1646) 2026-08-04 12:31:11 -07:00
Elias Schneider 2c7d1b63e1 fix: don't rely on content length header for optional json binding 2026-08-04 21:10:17 +02:00
Elias SchneiderandGitHub 5d43c4aaeb feat: add ability to customize session duration of clients (#1641) 2026-08-03 23:23:29 +02:00
Elias Schneider 1238bf0f37 fix: explicitly require JSON for request bodies 2026-08-03 22:58:08 +02:00
Elias Schneider 69d55ada6c fix: explicitly set SameSite to Lax for cookies 2026-08-03 22:58:01 +02:00
Elias Schneider db64b150be fix: disable api key auth for webauthn register endpoints 2026-08-03 20:20:40 +02:00
Elias SchneiderandGitHub 7a4d0dd275 refactor: standardize API error handling (#1635) 2026-08-02 23:36:06 +02:00
Elias Schneider 598895e7c5 fix: session revoke fails if orphaned session tokens exist 2026-08-02 18:31:15 +02:00
1934efa84c feat: implement OAuth Client ID Metadata Document (#1525) (#1526)
Co-authored-by: Elias Schneider <login@eliasschneider.com>
2026-08-02 15:05:39 +00:00
Elias Schneider 7c55bdf115 feat: make oauth access tokens RFC 9068 compliant 2026-08-02 15:59:21 +02:00
dependabot[bot]andGitHub d24a68d24f chore(deps): Bump the "all-dependencies" group with 3 updates across multiple ecosystems (#1639) 2026-07-31 18:04:54 +02:00
Salvatore CatroppaandGitHub 8815e5968b fix: one-time-access-token CLI fails with "RuntimePSKs is required" (#1637) 2026-07-31 00:09:10 +02:00
Elias Schneider e35be309a3 fix: decrease QR code login session duration to 5 minutes 2026-07-30 12:34:02 +02:00
Elias Schneider 0c5e0149cd chore(deps): upgrade vulnerable dependencies 2026-07-30 00:43:11 +02:00
Elias Schneider 9e72bc1c70 feat: display country and city on qr code login approval screen 2026-07-30 00:22:31 +02:00
Elias Schneider 0c27f733b9 feat: drop user initiated one time access token login method 2026-07-29 23:49:08 +02:00
2ef7c93fee feat: migrate app locks to Francis (#1624)
Co-authored-by: Elias Schneider <login@eliasschneider.com>
Co-authored-by: Kyle Mendell <kmendell@ofkm.us>
2026-07-29 22:15:40 +02:00