  
|
8c095afd78
|
refactor: migrate SCIM sync to actor + add tests (#1680)
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
|
2026-08-18 21:54:06 +02:00 |
|
  
|
46b8d54e15
|
feat: serve RFC 8414 authorization server metadata (#1685)
Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com>
Co-authored-by: Elias Schneider <login@eliasschneider.com>
|
2026-08-12 23:13:05 +02:00 |
|
 Anthony ClericiandGitHub
|
86cf73b86c
|
docs: add error responses to openapi spec (#1684)
|
2026-08-11 19:26:48 +02:00 |
|
|
Alessandro (Ale) SegalaandGitHub
|
155a1fcba0
|
feat: support multiple client secrets per OIDC client (#1679)
|
2026-08-11 00:54:52 +00:00 |
|
|
Elias Schneider
|
3ca9a55c71
|
feat: hide apps without launch url on My Apps page
|
2026-08-10 22:53:35 +02:00 |
|
|
Elias Schneider
|
0c9a03e519
|
feat: add animated logo as default logo
|
2026-08-08 20:50:37 +02:00 |
|
|
563c0f93a6
|
refactor: migrate LDAP sync to an actor (#1651)
Co-authored-by: Kyle Mendell <kmendell@ofkm.us>
|
2026-08-07 09:18:30 -07:00 |
|
|
Elias SchneiderandGitHub
|
7a4d0dd275
|
refactor: standardize API error handling (#1635)
|
2026-08-02 23:36:06 +02:00 |
|
|
|
1934efa84c
|
feat: implement OAuth Client ID Metadata Document (#1525) (#1526)
Co-authored-by: Elias Schneider <login@eliasschneider.com>
|
2026-08-02 15:05:39 +00:00 |
|
|
|
2ef7c93fee
|
feat: migrate app locks to Francis (#1624)
Co-authored-by: Elias Schneider <login@eliasschneider.com>
Co-authored-by: Kyle Mendell <kmendell@ofkm.us>
|
2026-07-29 22:15:40 +02:00 |
|
|
Elias SchneiderandGitHub
|
43aaccd5bf
|
refactor: modularize email module and use actor for email verification (#1625)
|
2026-07-27 20:00:59 +02:00 |
|
 Markus SchanzandGitHub
|
9f559788a4
|
feat: add support for declaritive client secret configuration (#1619)
|
2026-07-26 16:27:42 +02:00 |
|
|
|
a1b4e1d2b2
|
feat: migrate one-time and signup tokens to an actor (#1611)
Co-authored-by: Elias Schneider <login@eliasschneider.com>
|
2026-07-26 15:32:43 +02:00 |
|
|
|
2cfbcb4b67
|
refactor: use actors for db configuration (#1604)
Co-authored-by: Claude <noreply@anthropic.com>
|
2026-07-20 08:48:05 +02:00 |
|
|
Elias Schneider
|
25dcad757a
|
feat: add support for unencrypted OIDC request parameter
|
2026-07-08 10:42:05 +02:00 |
|
|
Alessandro (Ale) SegalaandGitHub
|
eefd51cc4d
|
fix: various bugs in observability / OTel (#1564)
|
2026-07-05 14:14:39 -07:00 |
|
|
|
9607495ab4
|
refactor: integrate Francis actor framework for background jobs, cron scheduling, and rate limiting (#1556)
Co-authored-by: Elias Schneider <login@eliasschneider.com>
Co-authored-by: Claude <noreply@anthropic.com>
|
2026-07-03 08:36:45 +02:00 |
|
|
Elias Schneider
|
ecad31cae2
|
refactor: migrate signup functionality to single usersignup module
|
2026-06-30 20:53:31 +02:00 |
|
|
Elias Schneider
|
58fcf7cbe6
|
refactor: migrate Webauthn functionality to single webauthn module
|
2026-06-29 14:05:07 +02:00 |
|
|
Elias Schneider
|
9fce987106
|
refactor: migrate API key functionality to single apikey module
|
2026-06-29 12:11:18 +02:00 |
|
|
Elias Schneider
|
2ed703540d
|
fix: don't reject offline_accessscope
|
2026-06-26 14:43:22 +02:00 |
|
|
Elias SchneiderandGitHub
|
8158452b37
|
refactor: use fosite for OAuth 2.0 logic (#1520)
|
2026-06-22 18:42:02 +02:00 |
|
 
|
2e77d57282
|
fix: login code null submission and login code length check (#1512)
Co-authored-by: james <james@goldfish.net>
Co-authored-by: Kyle Mendell <kmendell@ofkm.us>
|
2026-06-20 20:42:50 +02:00 |
|
|
Elias Schneider
|
8a75774971
|
fix: callback URL validation not validated if prompt=none
|
2026-06-16 12:02:57 +02:00 |
|
|
Elias Schneider
|
3d9d4de619
|
fix: PAR parameters not respected by authorize page
|
2026-06-16 09:29:34 +02:00 |
|
|
68a5abdcca
|
feat(oauth): add support for Pushed Authorization Requests (RFC9126) (#1404)
Co-authored-by: Elias Schneider <login@eliasschneider.com>
|
2026-06-02 14:02:12 +02:00 |
|
|
Elias SchneiderandGitHub
|
9dd3d319cf
|
feat: delete OAuth refresh token on RP initiated logout (#1480)
|
2026-05-19 17:05:44 +02:00 |
|
 
|
da3489cfa5
|
fix(oidc): fall back to Basic auth when PKCE puts client_id in body (#1466)
Co-authored-by: mgabor3141 <@mgabor3141>
Co-authored-by: Gabor Mezo <git@mgabor.hu>
Co-authored-by: Alessandro (Ale) Segala <43508+ItalyPaleAle@users.noreply.github.com>
|
2026-05-07 23:01:51 -05:00 |
|
|
|
f4706cd6cc
|
feat: add support for "select_account" prompt (#1453)
Co-authored-by: Elias Schneider <login@eliasschneider.com>
|
2026-04-26 17:26:21 +00:00 |
|
|
Anthony ClericiandGitHub
|
0ed2c48591
|
docs: add missing /api prefix to app config swagger routes (#1454)
|
2026-04-25 17:58:41 +02:00 |
|
|
Elias Schneider
|
444f7ff2b0
|
feat: return not found. on /setup if already completed
|
2026-04-19 20:13:19 +02:00 |
|
 
|
59fe481af9
|
feat: add OpenID Connect prompt Parameter Handling (#1299)
Co-authored-by: Copilot <198982749+Copilot@users.noreply.github.com>
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Co-authored-by: Elias Schneider <login@eliasschneider.com>
|
2026-04-19 18:03:08 +02:00 |
|
|
Elias SchneiderandGitHub
|
5c4d7ff877
|
feat: add auth method claim (amr) to tokens (#1433)
|
2026-04-18 22:31:24 +02:00 |
|
 
|
33cceeafa8
|
feat: add ability to revoke passkeys of users as admin (#1386)
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: jose-d <7630424+jose-d@users.noreply.github.com>
Co-authored-by: Alessandro (Ale) Segala <43508+ItalyPaleAle@users.noreply.github.com>
Co-authored-by: Elias Schneider <login@eliasschneider.com>
|
2026-04-12 16:29:42 +00:00 |
|
|
Alessandro (Ale) SegalaandGitHub
|
2b94535ade
|
fix: disable callback URLs with protocols "javascript" and "data" (#1397)
|
2026-04-02 17:01:44 -07:00 |
|
 Owen VokeandGitHub
|
3700bd942d
|
feat: add token_endpoint_auth_methods_supported to .well-known (#1388)
|
2026-03-23 12:51:32 -05:00 |
|
 
|
192f71a13c
|
feat: allow clearing background image (#1290)
Co-authored-by: Kyle Mendell <kmendell@ofkm.us>
Co-authored-by: Kyle Mendell <ksm@ofkm.us>
|
2026-03-08 14:45:04 -05:00 |
|
|
|
f90f21b620
|
feat: allow use of svg, png, and ico images types for favicon (#1289)
Co-authored-by: Alessandro (Ale) Segala <43508+ItalyPaleAle@users.noreply.github.com>
Co-authored-by: Kyle Mendell <kmendell@ofkm.us>
|
2026-03-08 19:25:49 +00:00 |
|
|
Alessandro (Ale) SegalaandGitHub
|
27ca713cd4
|
fix: one-time-access-token route should get user ID from URL only (#1358)
|
2026-03-03 18:53:36 -08:00 |
|
|
4d22c2dbcf
|
fix: federated client credentials not working if sub ≠ client_id (#1342)
Co-authored-by: Copilot <198982749+Copilot@users.noreply.github.com>
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
|
2026-03-01 18:48:20 +01:00 |
|
|
Elias SchneiderandGitHub
|
0c41872cd4
|
fix: disallow API key renewal and creation with API key authentication (#1334)
|
2026-02-23 20:34:25 +01:00 |
|
|
Kyle MendellandGitHub
|
ae269371da
|
feat: current version api endpoint (#1310)
|
2026-02-22 10:39:19 -08:00 |
|
|
Alessandro (Ale) SegalaandGitHub
|
eb0456a395
|
fix: token endpoint must not accept params as query string args (#1321)
|
2026-02-17 22:31:09 -06:00 |
|
 Yegor PomortsevandGitHub
|
6eebecd85a
|
fix: decode URL-encoded client ID and secret in Basic auth (#1263)
|
2026-01-24 20:52:17 +00:00 |
|
 MoritzandGitHub
|
a5629e63d2
|
fix: prevent deletion of OIDC provider logo for non admin/anonymous users (#1267)
|
2026-01-24 17:23:21 +01:00 |
|
|
Elias SchneiderandGitHub
|
1e7442f5df
|
feat: add support for email verification (#1223)
|
2026-01-11 12:31:26 +01:00 |
|
|
Elias SchneiderandGitHub
|
811e8772b6
|
feat: add option to renew API key (#1214)
|
2026-01-09 12:08:58 +01:00 |
|
|
Elias SchneiderandGitHub
|
579cfdc678
|
feat: add support for SCIM provisioning (#1182)
|
2026-01-02 17:54:20 +01:00 |
|
|
|
3420a00073
|
feat: add CLI command for importing and exporting Pocket ID data (#998)
Co-authored-by: Alessandro (Ale) Segala <43508+ItalyPaleAle@users.noreply.github.com>
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
|
2025-12-30 17:01:22 +01:00 |
|
|
Elias SchneiderandGitHub
|
f75cef83d5
|
feat: restrict oidc clients by user groups per default (#1164)
|
2025-12-24 09:09:25 +01:00 |
|