   
|
05bfe00924
|
feat: JWT bearer assertions for client authentication (#566)
Co-authored-by: Kyle Mendell <ksm@ofkm.us>
Co-authored-by: Kyle Mendell <kmendell@ofkm.us>
Co-authored-by: Elias Schneider <login@eliasschneider.com>
|
2025-06-06 12:23:51 +02:00 |
|
|
Elias Schneider
|
d217083059
|
feat: add API endpoint for user authorized clients
|
2025-06-04 09:23:44 +02:00 |
|
|
Elias Schneider
|
6c00aaa3ef
|
fix: allow users to update their locale even when own account update disabled
|
2025-06-02 11:35:13 +02:00 |
|
|
Kyle MendellandElias Schneider
|
38d7ee4432
|
feat: show allowed group count on oidc client list (#567)
Co-authored-by: Elias Schneider <login@eliasschneider.com>
|
2025-05-25 19:22:25 +00:00 |
|
|
Alessandro (Ale) Segala
|
b71c84c355
|
refactor: some clean-up in OIDC service and controller (#550)
|
2025-05-24 22:55:46 +02:00 |
|
|
Elias SchneiderandAlessandro Segala
|
f8a7467ec0
|
refactor!: serve the static frontend trough the backend (#520)
Co-authored-by: Alessandro (Ale) Segala <43508+ItalyPaleAle@users.noreply.github.com>
|
2025-05-24 22:55:46 +02:00 |
|
|
Elias Schneider
|
63a0c08696
|
fix: handle CORS correctly for endpoints that SPAs need (#513)
|
2025-05-08 21:56:17 +02:00 |
|
|
Kyle MendellandElias Schneider
|
73c82ae43a
|
tests: add e2e LDAP tests (#466)
Co-authored-by: Elias Schneider <login@eliasschneider.com>
|
2025-05-07 14:38:02 +00:00 |
|
|
Alessandro (Ale) Segala
|
3c87e4ec14
|
feat: add healthz endpoint (#494)
|
2025-05-06 22:14:18 +02:00 |
|
|
Elias Schneider
|
6bd6cefaa6
|
fix: non admin users weren't able to call the end session endpoint
|
2025-05-03 22:53:55 +02:00 |
|
 James Baker
|
990c8af3d1
|
Fix incorrectly swapped refreshToken and accessToken (#490)
|
2025-04-27 14:09:07 -05:00 |
|
|
Alessandro (Ale) Segala
|
4c33793678
|
fix: pass context to methods that were missing it (#487)
|
2025-04-26 12:32:42 -05:00 |
|
|
Kyle MendellandElias Schneider
|
22f7d64bf0
|
feat: device authorization endpoint (#270)
Co-authored-by: Elias Schneider <login@eliasschneider.com>
|
2025-04-25 12:14:51 -05:00 |
|
|
Elias SchneiderandKyle Mendell
|
fe1c4b18cd
|
feat: add ability to send login code via email (#457)
Co-authored-by: Kyle Mendell <kmendell@ofkm.us>
|
2025-04-20 18:32:40 +02:00 |
|
|
Alessandro (Ale) SegalaandKyle Mendell
|
796bc7ed34
|
fix: improve LDAP error handling (#425)
Co-authored-by: Kyle Mendell <kmendell@ofkm.us>
|
2025-04-12 18:38:19 -04:00 |
|
|
Alessandro (Ale) Segala
|
f83bab9e17
|
refactor: simplify app_config service and fix race conditions (#423)
|
2025-04-10 13:41:22 +02:00 |
|
|
Elias Schneider
|
4ba68938dd
|
fix: ignore profile picture cache after profile picture gets updated
|
2025-04-09 15:51:58 +02:00 |
|
|
7e5d16be9b
|
feat: implement token introspection (#405)
Co-authored-by: Kyle Mendell <kmendell@ofkm.us>
Co-authored-by: Elias Schneider <login@eliasschneider.com>
|
2025-04-09 07:18:03 +00:00 |
|
|
Alessandro (Ale) SegalaandKyle Mendell
|
ec626ee797
|
fix: use transactions when operations involve multiple database queries (#392)
Co-authored-by: Kyle Mendell <kmendell@ofkm.us>
|
2025-04-06 15:04:08 +02:00 |
|
|
Alessandro (Ale) SegalaandKyle Mendell
|
9e88926283
|
fix: ensure indexes on audit_logs table (#415)
Co-authored-by: Kyle Mendell <kmendell@ofkm.us>
|
2025-04-04 17:05:32 +00:00 |
|
|
Alessandro (Ale) Segala
|
2f7646105e
|
fix: ensure file descriptors are closed + other bugs (#413)
|
2025-04-04 10:04:36 +02:00 |
|
|
Kyle MendellandElias Schneider
|
b65e693e12
|
feat: global audit log (#320)
Co-authored-by: Elias Schneider <login@eliasschneider.com>
|
2025-04-03 10:11:49 -05:00 |
|
|
Alessandro (Ale) SegalaandElias Schneider
|
b3b43a56af
|
refactor: do not include test controller in production builds (#402)
Co-authored-by: Elias Schneider <login@eliasschneider.com>
|
2025-03-29 22:11:25 +00:00 |
|
|
Elias Schneider
|
7e658276f0
|
fix: ldap users aren't deleted if removed from ldap server
|
2025-03-29 22:55:44 +01:00 |
|
 Rich
|
b935a4824a
|
ci/cd: migrate backend linter to v2. fixed unit test workflow (#400)
|
2025-03-28 04:00:55 -05:00 |
|
|
Alessandro (Ale) SegalaandElias Schneider
|
96876a99c5
|
feat: add support for ECDSA and EdDSA keys (#359)
Co-authored-by: Elias Schneider <login@eliasschneider.com>
|
2025-03-27 18:20:39 +01:00 |
|
|
Elias Schneider
|
5c198c280c
|
refactor: fix code smells
|
2025-03-27 17:46:10 +01:00 |
|
|
Elias Schneider
|
c9e0073b63
|
refactor: fix code smells
|
2025-03-27 16:48:36 +01:00 |
|
|
Kyle MendellandElias Schneider
|
b8dcda8049
|
feat: add OIDC refresh_token support (#325)
Co-authored-by: Elias Schneider <login@eliasschneider.com>
|
2025-03-23 20:14:26 +00:00 |
|
|
Kyle Mendell
|
7888d70656
|
docs: fix api routers for swag documentation (#378)
|
2025-03-23 19:26:07 +00:00 |
|
|
Alessandro (Ale) SegalaandKyle Mendell
|
a7c9741802
|
feat: store keys as JWK on disk (#339)
Co-authored-by: Kyle Mendell <kmendell@ofkm.us>
|
2025-03-18 21:08:33 +01:00 |
|
|
Kyle MendellandElias Schneider
|
8f146188d5
|
feat(profile-picture): allow reset of profile picture (#355)
Co-authored-by: Elias Schneider <login@eliasschneider.com>
|
2025-03-18 19:59:31 +00:00 |
|
|
Elias Schneider
|
e45d9e970d
|
fix: caching for own profile picture
|
2025-03-16 17:45:30 +01:00 |
|
|
Kyle MendellandElias Schneider
|
62915d863a
|
feat: api key authentication (#291)
Co-authored-by: Elias Schneider <login@eliasschneider.com>
|
2025-03-11 19:16:42 +00:00 |
|
 JonasandElias Schneider
|
eb1426ed26
|
feat(account): add ability to sign in with login code (#271)
Co-authored-by: Elias Schneider <login@eliasschneider.com>
|
2025-03-10 12:45:45 +01:00 |
|
|
Kyle MendellandElias Schneider
|
0f14a93e1d
|
feat: display groups on the account page (#296)
Co-authored-by: Elias Schneider <login@eliasschneider.com>
|
2025-03-06 22:25:03 +01:00 |
|
|
Jonas
|
ef25f6b6b8
|
fix: profile picture of other user can't be updated (#273)
|
2025-03-01 20:42:29 +01:00 |
|
|
Elias Schneider
|
1652cc65f3
|
fix: support POST for OIDC userinfo endpoint
|
2025-03-01 20:42:00 +01:00 |
|
|
Elias Schneider
|
4bafee4f58
|
fix: add groups scope and claim to well known endpoint
|
2025-03-01 20:41:30 +01:00 |
|
|
Elias Schneider
|
887c5e462a
|
fix: updating profile picture of other user updates own profile picture
|
2025-02-24 09:35:44 +01:00 |
|
|
Elias Schneider
|
652ee6ad5d
|
feat: add ability to upload a profile picture (#244)
|
2025-02-19 14:28:45 +01:00 |
|
|
Elias Schneider
|
7550333fe2
|
feat: add end session endpoint (#232)
|
2025-02-14 17:09:27 +01:00 |
|
|
Elias Schneider
|
c6ab2b252c
|
chore: replace stonith404 with pocket-id after org migration
|
2025-02-05 18:08:01 +01:00 |
|
|
Elias Schneider
|
13b02a072f
|
feat: map allowed groups to OIDC clients (#202)
|
2025-02-03 18:41:15 +01:00 |
|
|
Elias Schneider
|
164ce6a3d7
|
fix: add __HOST prefix to cookies (#175)
|
2025-01-24 12:01:27 +01:00 |
|
|
Elias Schneider
|
06b90eddd6
|
feat: allow sign in with email (#100)
|
2025-01-19 15:30:31 +01:00 |
|
 Kyle MendellandElias Schneider
|
5101b14eec
|
feat: add LDAP sync (#106)
Co-authored-by: Elias Schneider <login@eliasschneider.com>
|
2025-01-19 13:02:07 +01:00 |
|
|
Elias Schneider
|
bc8f454ea1
|
fix: session duration ignored in cookie expiration
|
2025-01-18 23:27:55 +01:00 |
|
 Chris Danis
|
fda08ac1cd
|
fix: always set secure on cookie (#130)
|
2025-01-18 22:33:41 +01:00 |
|
|
Elias Schneider
|
fd69830c26
|
feat: add sorting for tables
|
2025-01-11 20:32:22 +01:00 |
|