  Alessandro (Ale) SegalaandGitHub
|
2dc062ac0f
|
refactor: move API key cleanup job to actor (#1687)
|
2026-08-15 00:39:02 +02:00 |
|
  
|
46b8d54e15
|
feat: serve RFC 8414 authorization server metadata (#1685)
Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com>
Co-authored-by: Elias Schneider <login@eliasschneider.com>
|
2026-08-12 23:13:05 +02:00 |
|
 Anthony ClericiandGitHub
|
86cf73b86c
|
docs: add error responses to openapi spec (#1684)
|
2026-08-11 19:26:48 +02:00 |
|
|
Elias Schneider
|
9e637d5aec
|
fix: improve validation of app config variables
|
2026-08-08 16:37:14 +02:00 |
|
|
Elias Schneider
|
95809dd29c
|
tests: remove invalid unit test
|
2026-08-05 22:01:43 +02:00 |
|
|
Elias Schneider
|
140b5d3cb4
|
fix: don't skip rate limits for loopback addresses
|
2026-08-05 21:49:05 +02:00 |
|
|
Elias SchneiderandGitHub
|
7a4d0dd275
|
refactor: standardize API error handling (#1635)
|
2026-08-02 23:36:06 +02:00 |
|
|
|
1934efa84c
|
feat: implement OAuth Client ID Metadata Document (#1525) (#1526)
Co-authored-by: Elias Schneider <login@eliasschneider.com>
|
2026-08-02 15:05:39 +00:00 |
|
|
|
e1fd1d320f
|
feat: add qr code alternative sign in method (#1594)
Co-authored-by: ItalyPaleAle <43508+ItalyPaleAle@users.noreply.github.com>
|
2026-07-28 01:30:13 +02:00 |
|
|
Elias SchneiderandGitHub
|
43aaccd5bf
|
refactor: modularize email module and use actor for email verification (#1625)
|
2026-07-27 20:00:59 +02:00 |
|
|
|
2cfbcb4b67
|
refactor: use actors for db configuration (#1604)
Co-authored-by: Claude <noreply@anthropic.com>
|
2026-07-20 08:48:05 +02:00 |
|
|
Alessandro (Ale) SegalaandGitHub
|
cfda5f693b
|
refactor: manage instance ID in the KV table (#1579)
|
2026-07-11 16:16:05 +02:00 |
|
|
Elias Schneider
|
f3b6ceb876
|
fix: add missing burst to rate limit
|
2026-07-07 14:01:26 +02:00 |
|
|
|
09d196f7c5
|
feat: add OAuth APIs with scoped permissions (#1542)
Co-authored-by: Alessandro (Ale) Segala <43508+ItalyPaleAle@users.noreply.github.com>
|
2026-07-06 12:25:02 -07:00 |
|
|
Alessandro (Ale) SegalaandGitHub
|
eefd51cc4d
|
fix: various bugs in observability / OTel (#1564)
|
2026-07-05 14:14:39 -07:00 |
|
|
|
9607495ab4
|
refactor: integrate Francis actor framework for background jobs, cron scheduling, and rate limiting (#1556)
Co-authored-by: Elias Schneider <login@eliasschneider.com>
Co-authored-by: Claude <noreply@anthropic.com>
|
2026-07-03 08:36:45 +02:00 |
|
|
Elias Schneider
|
58fcf7cbe6
|
refactor: migrate Webauthn functionality to single webauthn module
|
2026-06-29 14:05:07 +02:00 |
|
|
Elias Schneider
|
9fce987106
|
refactor: migrate API key functionality to single apikey module
|
2026-06-29 12:11:18 +02:00 |
|
|
Elias Schneider
|
16b5c16a66
|
fix: CSP error with response_mode=form_post
|
2026-06-26 14:51:56 +02:00 |
|
|
Elias SchneiderandGitHub
|
8158452b37
|
refactor: use fosite for OAuth 2.0 logic (#1520)
|
2026-06-22 18:42:02 +02:00 |
|
|
Elias Schneider
|
8ad95b8af1
|
refactor: apply go 1.26.0 syntax updated
|
2026-05-18 23:06:54 +02:00 |
|
|
|
f4706cd6cc
|
feat: add support for "select_account" prompt (#1453)
Co-authored-by: Elias Schneider <login@eliasschneider.com>
|
2026-04-26 17:26:21 +00:00 |
|
 
|
64d4ac7919
|
feat: add support for response_mode=form_post (#1360)
Co-authored-by: Alessandro (Ale) Segala <43508+ItalyPaleAle@users.noreply.github.com>
Co-authored-by: Kyle Mendell <kmendell@ofkm.us>
Co-authored-by: Elias Schneider <login@eliasschneider.com>
|
2026-04-26 14:11:35 +02:00 |
|
|
c96d591484
|
fix: return correct byte count in HEAD request writer (#1443)
Co-authored-by: Kyle Mendell <kmendell@ofkm.us>
|
2026-04-21 15:03:08 -05:00 |
|
|
Alessandro (Ale) SegalaandGitHub
|
2f0338211d
|
chore: update golangci-lint (#1440)
|
2026-04-21 11:53:06 -05:00 |
|
|
Elias SchneiderandGitHub
|
5c4d7ff877
|
feat: add auth method claim (amr) to tokens (#1433)
|
2026-04-18 22:31:24 +02:00 |
|
|
Elias SchneiderandGitHub
|
0c41872cd4
|
fix: disallow API key renewal and creation with API key authentication (#1334)
|
2026-02-23 20:34:25 +01:00 |
|
|
Elias SchneiderandGitHub
|
746aa71d67
|
feat: add static api key env variable (#1229)
|
2026-01-11 15:36:27 +01:00 |
|
|
Elias Schneider
|
9ca3d33c88
|
feat: add environment variable to disable built-in rate limiting
|
2026-01-11 14:26:30 +01:00 |
|
|
Elias SchneiderandGitHub
|
91b0d74c43
|
feat: add HTTP HEAD method support (#1135)
|
2025-12-05 11:17:13 +01:00 |
|
|
Elias SchneiderandGitHub
|
a25d6ef56c
|
feat: add Cache-Control: private, no-store to all API routes per default (#1126)
|
2025-11-30 18:29:35 +01:00 |
|
|
Alessandro (Ale) SegalaandGitHub
|
a54b867105
|
refactor: use constants for AppEnv values (#1098)
|
2025-11-16 18:25:06 +01:00 |
|
|
Elias Schneider
|
22f4254932
|
fix: allow any image source but disallow base64
|
2025-10-03 11:50:39 +02:00 |
|
|
Elias SchneiderandGitHub
|
02249491f8
|
feat: allow uppercase usernames (#958)
|
2025-09-17 14:43:12 -05:00 |
|
|
|
6215e1ac01
|
feat: add CSP header (#908)
Co-authored-by: Alessandro (Ale) Segala <43508+ItalyPaleAle@users.noreply.github.com>
|
2025-09-07 11:45:06 -07:00 |
|
|
Alessandro (Ale) SegalaandGitHub
|
e1de593dcd
|
fix: login failures on Postgres when IP is null (#737)
|
2025-07-09 08:45:07 -05:00 |
|
|
Elias Schneider
|
b9489b5e9a
|
fix: whitelist authorization header for CORS
|
2025-06-02 15:55:29 +02:00 |
|
|
Elias SchneiderandGitHub
|
63a0c08696
|
fix: handle CORS correctly for endpoints that SPAs need (#513)
|
2025-05-08 21:56:17 +02:00 |
|
|
Elias Schneider
|
4614769b84
|
refactor: reorganize imports
|
2025-04-28 10:49:54 +02:00 |
|
|
Elias Schneider
|
86d2b5f59f
|
fix: return correct error message if user isn't authorized
|
2025-04-28 10:39:17 +02:00 |
|
|
|
c843a60131
|
feat: disable/enable users (#437)
Co-authored-by: Elias Schneider <login@eliasschneider.com>
|
2025-04-18 15:38:50 +00:00 |
|
|
7e5d16be9b
|
feat: implement token introspection (#405)
Co-authored-by: Kyle Mendell <kmendell@ofkm.us>
Co-authored-by: Elias Schneider <login@eliasschneider.com>
|
2025-04-09 07:18:03 +00:00 |
|
|
|
ec626ee797
|
fix: use transactions when operations involve multiple database queries (#392)
Co-authored-by: Kyle Mendell <kmendell@ofkm.us>
|
2025-04-06 15:04:08 +02:00 |
|
|
Elias Schneider
|
cf3084cfa8
|
refactor: remove cors exception from middleware as this is handled by the handler
|
2025-03-30 22:30:22 +02:00 |
|
 RichandGitHub
|
b935a4824a
|
ci/cd: migrate backend linter to v2. fixed unit test workflow (#400)
|
2025-03-28 04:00:55 -05:00 |
|
|
|
96876a99c5
|
feat: add support for ECDSA and EdDSA keys (#359)
Co-authored-by: Elias Schneider <login@eliasschneider.com>
|
2025-03-27 18:20:39 +01:00 |
|
|
Elias Schneider
|
c9e0073b63
|
refactor: fix code smells
|
2025-03-27 16:48:36 +01:00 |
|
|
|
62915d863a
|
feat: api key authentication (#291)
Co-authored-by: Elias Schneider <login@eliasschneider.com>
|
2025-03-11 19:16:42 +00:00 |
|
|
Elias Schneider
|
c6ab2b252c
|
chore: replace stonith404 with pocket-id after org migration
|
2025-02-05 18:08:01 +01:00 |
|
|
Elias SchneiderandGitHub
|
164ce6a3d7
|
fix: add __HOST prefix to cookies (#175)
|
2025-01-24 12:01:27 +01:00 |
|