Alessandro (Ale) Segala
15df2bba2b
Merge branch 'main' into feat/fic-public-keys
2026-08-22 19:46:29 -07:00
dependabot[bot] and lnx01
d258d952b1
chore(deps): Bump the "all-dependencies" group with 2 updates across multiple ecosystems ( #1711 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-22 22:15:28 +02:00
Alessandro (Ale) Segala
619a00ea11
Merge branch 'main' into feat/fic-public-keys
2026-08-18 12:55:25 -07:00
Alessandro (Ale) Segala and lnx01
8c095afd78
refactor: migrate SCIM sync to actor + add tests ( #1680 )
...
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com >
2026-08-18 21:54:06 +02:00
Alessandro (Ale) Segala
1814fdee18
Merge branch 'main' into feat/fic-public-keys
2026-08-18 12:48:51 -07:00
Elias Schneider
a487c78550
feat: reduce one time access code length for better UX
2026-08-18 21:31:22 +02:00
Elias Schneider
915a6bcf08
feat: allow admins to auto grant APIs to CIMD clients ( #1692 )
2026-08-18 20:02:14 +02:00
ItalyPaleAle
e5b8e36e8a
feat: add explicit public keys for federated client credentials
...
A federated client credential could only point at a JWKS URL, which
requires the assertion issuer to host a discoverable JWKS.
This PR allows an admin to manually import public keys for FIC, so Pocket ID works better in air-gapped environments.
Also fixes an error introduced by #1679 where some text labels were not added to paraglide
2026-08-18 08:47:25 -07:00
Alessandro (Ale) Segala
be4c395528
refactor: move remaining database cleanup jobs to actors ( #1698 )
2026-08-17 08:38:35 +02:00
github-actions[bot] and stonith404
0e8ae3b1c7
chore: update AAGUIDs ( #1696 )
...
Co-authored-by: stonith404 <58886915+stonith404@users.noreply.github.com >
2026-08-17 08:35:16 +02:00
Elias Schneider
9421d43f8e
fix: ignore trailing slash in resources
2026-08-17 08:34:28 +02:00
Elias Schneider
07580d9f9f
chore(deps): use fix version for github.com/italypaleale/go-kit
2026-08-16 23:24:37 +02:00
c7cab3af84
chore(deps): Bump the "all-dependencies" group with 4 updates across multiple ecosystems ( #1693 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Elias Schneider <login@eliasschneider.com >
2026-08-15 01:17:57 +02:00
Alessandro (Ale) Segala
2dc062ac0f
refactor: move API key cleanup job to actor ( #1687 )
2026-08-15 00:39:02 +02:00
Elias Schneider
1bb21c5d73
refactor: move iss param handling to Fosite
2026-08-12 23:25:35 +02:00
46b8d54e15
feat: serve RFC 8414 authorization server metadata ( #1685 )
...
Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com >
Co-authored-by: Elias Schneider <login@eliasschneider.com >
2026-08-12 23:13:05 +02:00
Anthony Clerici
86cf73b86c
docs: add error responses to openapi spec ( #1684 )
2026-08-11 19:26:48 +02:00
Alessandro (Ale) Segala
155a1fcba0
feat: support multiple client secrets per OIDC client ( #1679 )
2026-08-11 00:54:52 +00:00
Elias Schneider
3ca9a55c71
feat: hide apps without launch url on My Apps page
2026-08-10 22:53:35 +02:00
Alessandro (Ale) Segala
84a58cd757
fix: ignore unsupported grant types in client ID metadata documents ( #1682 )
2026-08-10 09:45:34 -07:00
github-actions[bot] and stonith404
e21202e59b
chore: update AAGUIDs ( #1678 )
...
Co-authored-by: stonith404 <58886915+stonith404@users.noreply.github.com >
2026-08-09 23:41:54 -05:00
Alessandro (Ale) Segala
875e7f0848
chore: update Francis to beta 22 ( #1676 )
2026-08-09 15:45:09 +02:00
Elias Schneider
0c9a03e519
feat: add animated logo as default logo
2026-08-08 20:50:37 +02:00
Elias Schneider
9e637d5aec
fix: improve validation of app config variables
2026-08-08 16:37:14 +02:00
Alessandro (Ale) Segala and Kyle Mendell
563c0f93a6
refactor: migrate LDAP sync to an actor ( #1651 )
...
Co-authored-by: Kyle Mendell <kmendell@ofkm.us >
2026-08-07 09:18:30 -07:00
Alessandro (Ale) Segala
f8db1d8a86
chore: update francis to beta 21 ( #1669 )
2026-08-07 15:40:14 +00:00
dependabot[bot]
42626c50e4
chore(deps): Bump the "all-dependencies" group with 3 updates across multiple ecosystems ( #1668 )
2026-08-07 17:22:59 +02:00
Elias Schneider and Alessandro Segala
d6a47243db
feat: add settings for limiting what passkeys can be used ( #1662 )
...
Co-authored-by: Alessandro (Ale) Segala <43508+ItalyPaleAle@users.noreply.github.com >
2026-08-07 11:17:38 +02:00
448d271c94
refactor: fix formatting ( #1666 )
...
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com >
Co-authored-by: stonith404 <58886915+stonith404@users.noreply.github.com >
2026-08-07 08:26:45 +02:00
Elias Schneider
535e831b20
fix: brotli compression ignored ( #1661 )
2026-08-07 07:16:02 +02:00
Elias Schneider and Alessandro Segala
06ccadfcd0
fix: separate TLS inputs and preserve certificate reloads ( #1653 )
...
Co-authored-by: Alessandro (Ale) Segala <43508+ItalyPaleAle@users.noreply.github.com >
2026-08-07 00:32:08 +00:00
Alessandro (Ale) Segala
1f9cc5e58e
fix: in non-HA mode, increase AlarmLeaseDuration ( #1660 )
2026-08-06 20:16:48 +02:00
Alessandro (Ale) Segala
22e3909c6c
refactor: move GeoLite to its own package ( #1647 )
2026-08-05 22:12:19 +02:00
Alessandro (Ale) Segala
1c9233c236
fix: make OIDC client token lifetimes optional ( #1650 )
2026-08-05 20:11:40 +00:00
Elias Schneider
95809dd29c
tests: remove invalid unit test
2026-08-05 22:01:43 +02:00
08407ae564
feat: include Francis data in Pocket ID backups ( #1645 )
...
Co-authored-by: Claude <noreply@anthropic.com >
Co-authored-by: Elias Schneider <login@eliasschneider.com >
2026-08-05 19:57:38 +00:00
Elias Schneider
140b5d3cb4
fix: don't skip rate limits for loopback addresses
2026-08-05 21:49:05 +02:00
Elias Schneider
488c50ef95
fix: respect log level in HTTP request logs
2026-08-04 23:12:22 +02:00
Alessandro (Ale) Segala
a526206669
feat: add observability to actors ( #1646 )
2026-08-04 12:31:11 -07:00
Elias Schneider
2c7d1b63e1
fix: don't rely on content length header for optional json binding
2026-08-04 21:10:17 +02:00
Elias Schneider
5d43c4aaeb
feat: add ability to customize session duration of clients ( #1641 )
2026-08-03 23:23:29 +02:00
Elias Schneider
1238bf0f37
fix: explicitly require JSON for request bodies
2026-08-03 22:58:08 +02:00
Elias Schneider
69d55ada6c
fix: explicitly set SameSite to Lax for cookies
2026-08-03 22:58:01 +02:00
Elias Schneider
db64b150be
fix: disable api key auth for webauthn register endpoints
2026-08-03 20:20:40 +02:00
Elias Schneider
7a4d0dd275
refactor: standardize API error handling ( #1635 )
2026-08-02 23:36:06 +02:00
Elias Schneider
598895e7c5
fix: session revoke fails if orphaned session tokens exist
2026-08-02 18:31:15 +02:00
Jean-François Roy and Elias Schneider
1934efa84c
feat: implement OAuth Client ID Metadata Document ( #1525 ) ( #1526 )
...
Co-authored-by: Elias Schneider <login@eliasschneider.com >
2026-08-02 15:05:39 +00:00
Elias Schneider
7c55bdf115
feat: make oauth access tokens RFC 9068 compliant
2026-08-02 15:59:21 +02:00
dependabot[bot]
d24a68d24f
chore(deps): Bump the "all-dependencies" group with 3 updates across multiple ecosystems ( #1639 )
2026-07-31 18:04:54 +02:00
Salvatore Catroppa
8815e5968b
fix: one-time-access-token CLI fails with "RuntimePSKs is required" ( #1637 )
2026-07-31 00:09:10 +02:00
Alessandro (Ale) Segala
dependabot[bot]andlnx01
Elias Schneider
github-actions[bot]andstonith404
Anthony Clerici
Salvatore Catroppa