 Elias Schneider
|
9e72bc1c70
|
feat: display country and city on qr code login approval screen
|
2026-07-30 00:22:31 +02:00 |
|
|
Elias Schneider
|
0c27f733b9
|
feat: drop user initiated one time access token login method
|
2026-07-29 23:49:08 +02:00 |
|
 
|
2ef7c93fee
|
feat: migrate app locks to Francis (#1624)
Co-authored-by: Elias Schneider <login@eliasschneider.com>
Co-authored-by: Kyle Mendell <kmendell@ofkm.us>
|
2026-07-29 22:15:40 +02:00 |
|
|
Elias SchneiderandItalyPaleAle
|
e1fd1d320f
|
feat: add qr code alternative sign in method (#1594)
Co-authored-by: ItalyPaleAle <43508+ItalyPaleAle@users.noreply.github.com>
|
2026-07-28 01:30:13 +02:00 |
|
|
Elias Schneider
|
968f97fa61
|
fix: fail early if webauthn session invalid
|
2026-07-28 00:42:41 +02:00 |
|
|
Elias Schneider
|
ca28ddcb04
|
fix: race condition in initial admin setup
|
2026-07-28 00:19:01 +02:00 |
|
  Daniel SandovalandChatGPT
|
96fac69304
|
Merge commit from fork
Co-authored-by: ChatGPT <chatgpt@openai.com>
|
2026-07-27 20:38:19 +02:00 |
|
|
Elias Schneider
|
6bd058ac46
|
fix: make oidc device code redemption atomic
|
2026-07-27 20:32:42 +02:00 |
|
|
Elias Schneider
|
43aaccd5bf
|
refactor: modularize email module and use actor for email verification (#1625)
|
2026-07-27 20:00:59 +02:00 |
|
|
Elias Schneider
|
6bd4679bab
|
tests: correctly close filesystems
|
2026-07-26 23:30:36 +02:00 |
|
|
Elias Schneider
|
4743d5967a
|
fix: enforce user verification for login assertions
|
2026-07-26 19:09:12 +02:00 |
|
 Markus Schanz
|
9f559788a4
|
feat: add support for declaritive client secret configuration (#1619)
|
2026-07-26 16:27:42 +02:00 |
|
|
Alessandro (Ale) SegalaandElias Schneider
|
a1b4e1d2b2
|
feat: migrate one-time and signup tokens to an actor (#1611)
Co-authored-by: Elias Schneider <login@eliasschneider.com>
|
2026-07-26 15:32:43 +02:00 |
|
|
Markus Schanz
|
80c7c4aaf1
|
feat: add declaritive user id configuration (#1622)
|
2026-07-25 23:43:16 +02:00 |
|
|
Elias Schneider
|
8563934fd5
|
refactor: use NewTextHandler instead of NewHandler for tint
|
2026-07-24 17:27:54 +02:00 |
|
|
Elias Schneider
|
e10f66c07a
|
fix: show only accessible clients on "My Apps" page
|
2026-07-22 18:33:57 +02:00 |
|
|
Elias Schneider
|
ad06ea6e00
|
fix: datatype mismatch between postgres and sqlite causes import to fail
|
2026-07-22 18:13:13 +02:00 |
|
|
Elias Schneider
|
0983e91169
|
fix: honor webauthn user verification setting
|
2026-07-21 14:59:51 +02:00 |
|
 Alessandro (Ale) SegalaandClaude
|
2cfbcb4b67
|
refactor: use actors for db configuration (#1604)
Co-authored-by: Claude <noreply@anthropic.com>
|
2026-07-20 08:48:05 +02:00 |
|
|
Alessandro (Ale) SegalaandClaude
|
921095f0a2
|
fix: relax Francis DB usage while HA is still WIP (#1602)
Co-authored-by: Claude <noreply@anthropic.com>
|
2026-07-18 21:32:27 +02:00 |
|
|
Alessandro (Ale) Segala
|
b254d969a5
|
fix: sync group membership for users added at creation time (#1600)
|
2026-07-17 11:15:00 -07:00 |
|
|
Elias Schneider
|
807bd9e037
|
feat: add support for proxy protocol
|
2026-07-17 10:37:47 +02:00 |
|
|
Elias Schneider
|
9714296efb
|
fix: block link-local addresses in SSRF protection
|
2026-07-13 11:05:24 +02:00 |
|
|
Elias Schneider
|
187cd8ddcd
|
feat: add support for CIDR and IP address lists in TRUST_PROXY
|
2026-07-13 09:32:05 +02:00 |
|
|
Elias Schneider
|
d9ead47d19
|
fix: allow insecure callback URLs by default until next major release
|
2026-07-13 09:21:53 +02:00 |
|
|
Alessandro (Ale) Segala
|
cfda5f693b
|
refactor: manage instance ID in the KV table (#1579)
|
2026-07-11 16:16:05 +02:00 |
|
|
Elias Schneider
|
da3677f33d
|
docs: fix wrong OpenAPI documentation
|
2026-07-10 15:44:28 +02:00 |
|
|
Alessandro (Ale) Segala
|
b2711ced99
|
fix: /authorize endpoint crashes when list of scopes is empty (#1575)
|
2026-07-08 17:48:32 -07:00 |
|
 Sean McKenzieandElias Schneider
|
6734585712
|
feat: add description field to oidc clients (#1547)
Co-authored-by: Elias Schneider <login@eliasschneider.com>
|
2026-07-08 13:41:51 +02:00 |
|
|
Elias Schneider
|
c85a4e63da
|
fix: disable one time access token exchange for disabled users
|
2026-07-08 12:04:16 +02:00 |
|
|
Elias Schneider
|
ce7d3a7e1d
|
tests(unit): fix wrong migration name
|
2026-07-08 11:51:43 +02:00 |
|
|
Elias Schneider
|
190914fd72
|
refactor: remove duplicate fosite config properties
|
2026-07-08 11:01:50 +02:00 |
|
|
Elias Schneider
|
25dcad757a
|
feat: add support for unencrypted OIDC request parameter
|
2026-07-08 10:42:05 +02:00 |
|
|
Elias Schneider
|
f3b6ceb876
|
fix: add missing burst to rate limit
|
2026-07-07 14:01:26 +02:00 |
|
|
Elias Schneider
|
fa2d08cb6d
|
refactor: remove redundant dtos
|
2026-07-07 11:51:37 +02:00 |
|
|
Elias Schneider
|
2f55b7cbc3
|
fix: device authorization resolve resource creating device_code
|
2026-07-07 11:51:02 +02:00 |
|
|
Elias Schneider
|
8035a4c8d5
|
perf: include permissions in api list response
|
2026-07-07 11:38:59 +02:00 |
|
|
Elias Schneider
|
7667377c98
|
refactor: pass transaction to resolveResource
|
2026-07-07 11:14:19 +02:00 |
|
|
Elias Schneider
|
5e2cc6f40e
|
fix: merge requested scopes instead of replacing them
|
2026-07-07 11:03:06 +02:00 |
|
|
Elias Schneider
|
e8cb0c831c
|
fix: re-check api permissions on access token refresh
|
2026-07-07 10:58:39 +02:00 |
|
|
Elias Schneider
|
9a94aa0694
|
refactor: move Pocket ID specific logic from Fosite into Pocket ID repo
|
2026-07-06 23:34:33 +02:00 |
|
|
Elias Schneider
|
34e9a6d198
|
fix: restore behavior that unknown scopes get ignored
|
2026-07-06 22:42:38 +02:00 |
|
|
Elias SchneiderandAlessandro Segala
|
09d196f7c5
|
feat: add OAuth APIs with scoped permissions (#1542)
Co-authored-by: Alessandro (Ale) Segala <43508+ItalyPaleAle@users.noreply.github.com>
|
2026-07-06 12:25:02 -07:00 |
|
|
Alessandro (Ale) Segala
|
eefd51cc4d
|
fix: various bugs in observability / OTel (#1564)
|
2026-07-05 14:14:39 -07:00 |
|
|
Alessandro (Ale) Segala
|
f68ad42618
|
chore: use go-kit for sending emails (#1565)
|
2026-07-05 13:10:11 -07:00 |
|
|
|
9607495ab4
|
refactor: integrate Francis actor framework for background jobs, cron scheduling, and rate limiting (#1556)
Co-authored-by: Elias Schneider <login@eliasschneider.com>
Co-authored-by: Claude <noreply@anthropic.com>
|
2026-07-03 08:36:45 +02:00 |
|
|
Elias Schneider
|
ecad31cae2
|
refactor: migrate signup functionality to single usersignup module
|
2026-06-30 20:53:31 +02:00 |
|
|
Elias Schneider
|
58fcf7cbe6
|
refactor: migrate Webauthn functionality to single webauthn module
|
2026-06-29 14:05:07 +02:00 |
|
|
Elias Schneider
|
9fce987106
|
refactor: migrate API key functionality to single apikey module
|
2026-06-29 12:11:18 +02:00 |
|
 
|
97bd466f38
|
feat: prompt admin with PKCE client support hint (#1499)
Co-authored-by: james <james@goldfish.net>
Co-authored-by: Alessandro (Ale) Segala <43508+ItalyPaleAle@users.noreply.github.com>
Co-authored-by: Elias Schneider <login@eliasschneider.com>
Co-authored-by: Kyle Mendell <kmendell@ofkm.us>
|
2026-06-28 11:10:30 -07:00 |
|