584 Commits
Author SHA1 Message Date
d6a47243db feat: add settings for limiting what passkeys can be used (#1662)
Co-authored-by: Alessandro (Ale) Segala <43508+ItalyPaleAle@users.noreply.github.com>
2026-08-07 11:17:38 +02:00
448d271c94 refactor: fix formatting (#1666)
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: stonith404 <58886915+stonith404@users.noreply.github.com>
2026-08-07 08:26:45 +02:00
Elias SchneiderandGitHub 535e831b20 fix: brotli compression ignored (#1661) 2026-08-07 07:16:02 +02:00
06ccadfcd0 fix: separate TLS inputs and preserve certificate reloads (#1653)
Co-authored-by: Alessandro (Ale) Segala <43508+ItalyPaleAle@users.noreply.github.com>
2026-08-07 00:32:08 +00:00
Alessandro (Ale) SegalaandGitHub 1f9cc5e58e fix: in non-HA mode, increase AlarmLeaseDuration (#1660) 2026-08-06 20:16:48 +02:00
Alessandro (Ale) SegalaandGitHub 22e3909c6c refactor: move GeoLite to its own package (#1647) 2026-08-05 22:12:19 +02:00
Alessandro (Ale) SegalaandGitHub 1c9233c236 fix: make OIDC client token lifetimes optional (#1650) 2026-08-05 20:11:40 +00:00
Elias Schneider 95809dd29c tests: remove invalid unit test 2026-08-05 22:01:43 +02:00
08407ae564 feat: include Francis data in Pocket ID backups (#1645)
Co-authored-by: Claude <noreply@anthropic.com>
Co-authored-by: Elias Schneider <login@eliasschneider.com>
2026-08-05 19:57:38 +00:00
Elias Schneider 140b5d3cb4 fix: don't skip rate limits for loopback addresses 2026-08-05 21:49:05 +02:00
Elias Schneider 488c50ef95 fix: respect log level in HTTP request logs 2026-08-04 23:12:22 +02:00
Alessandro (Ale) SegalaandGitHub a526206669 feat: add observability to actors (#1646) 2026-08-04 12:31:11 -07:00
Elias Schneider 2c7d1b63e1 fix: don't rely on content length header for optional json binding 2026-08-04 21:10:17 +02:00
Elias SchneiderandGitHub 5d43c4aaeb feat: add ability to customize session duration of clients (#1641) 2026-08-03 23:23:29 +02:00
Elias Schneider 1238bf0f37 fix: explicitly require JSON for request bodies 2026-08-03 22:58:08 +02:00
Elias Schneider 69d55ada6c fix: explicitly set SameSite to Lax for cookies 2026-08-03 22:58:01 +02:00
Elias Schneider db64b150be fix: disable api key auth for webauthn register endpoints 2026-08-03 20:20:40 +02:00
Elias SchneiderandGitHub 7a4d0dd275 refactor: standardize API error handling (#1635) 2026-08-02 23:36:06 +02:00
Elias Schneider 598895e7c5 fix: session revoke fails if orphaned session tokens exist 2026-08-02 18:31:15 +02:00
1934efa84c feat: implement OAuth Client ID Metadata Document (#1525) (#1526)
Co-authored-by: Elias Schneider <login@eliasschneider.com>
2026-08-02 15:05:39 +00:00
Elias Schneider 7c55bdf115 feat: make oauth access tokens RFC 9068 compliant 2026-08-02 15:59:21 +02:00
dependabot[bot]andGitHub d24a68d24f chore(deps): Bump the "all-dependencies" group with 3 updates across multiple ecosystems (#1639) 2026-07-31 18:04:54 +02:00
Salvatore CatroppaandGitHub 8815e5968b fix: one-time-access-token CLI fails with "RuntimePSKs is required" (#1637) 2026-07-31 00:09:10 +02:00
Elias Schneider e35be309a3 fix: decrease QR code login session duration to 5 minutes 2026-07-30 12:34:02 +02:00
Elias Schneider 0c5e0149cd chore(deps): upgrade vulnerable dependencies 2026-07-30 00:43:11 +02:00
Elias Schneider 9e72bc1c70 feat: display country and city on qr code login approval screen 2026-07-30 00:22:31 +02:00
Elias Schneider 0c27f733b9 feat: drop user initiated one time access token login method 2026-07-29 23:49:08 +02:00
2ef7c93fee feat: migrate app locks to Francis (#1624)
Co-authored-by: Elias Schneider <login@eliasschneider.com>
Co-authored-by: Kyle Mendell <kmendell@ofkm.us>
2026-07-29 22:15:40 +02:00
e1fd1d320f feat: add qr code alternative sign in method (#1594)
Co-authored-by: ItalyPaleAle <43508+ItalyPaleAle@users.noreply.github.com>
2026-07-28 01:30:13 +02:00
Elias Schneider 968f97fa61 fix: fail early if webauthn session invalid 2026-07-28 00:42:41 +02:00
Elias Schneider ca28ddcb04 fix: race condition in initial admin setup 2026-07-28 00:19:01 +02:00
96fac69304 Merge commit from fork
Co-authored-by: ChatGPT <chatgpt@openai.com>
2026-07-27 20:38:19 +02:00
Elias Schneider 91d37126fa chore: pin version of fosite fork 2026-07-27 20:37:09 +02:00
Elias Schneider 6bd058ac46 fix: make oidc device code redemption atomic 2026-07-27 20:32:42 +02:00
Elias SchneiderandGitHub 43aaccd5bf refactor: modularize email module and use actor for email verification (#1625) 2026-07-27 20:00:59 +02:00
Elias Schneider 6bd4679bab tests: correctly close filesystems 2026-07-26 23:30:36 +02:00
Elias Schneider 4743d5967a fix: enforce user verification for login assertions 2026-07-26 19:09:12 +02:00
Markus SchanzandGitHub 9f559788a4 feat: add support for declaritive client secret configuration (#1619) 2026-07-26 16:27:42 +02:00
a1b4e1d2b2 feat: migrate one-time and signup tokens to an actor (#1611)
Co-authored-by: Elias Schneider <login@eliasschneider.com>
2026-07-26 15:32:43 +02:00
Markus SchanzandGitHub 80c7c4aaf1 feat: add declaritive user id configuration (#1622) 2026-07-25 23:43:16 +02:00
Elias Schneider 8563934fd5 refactor: use NewTextHandler instead of NewHandler for tint 2026-07-24 17:27:54 +02:00
c57c27a004 chore(deps): Bump the "all-dependencies" group with 3 updates across multiple ecosystems (#1621)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-24 17:21:42 +02:00
Elias Schneider f6b02efe45 chore: upgrade vulnerable dependencies 2026-07-22 18:48:07 +02:00
Elias Schneider e10f66c07a fix: show only accessible clients on "My Apps" page 2026-07-22 18:33:57 +02:00
Elias Schneider ad06ea6e00 fix: datatype mismatch between postgres and sqlite causes import to fail 2026-07-22 18:13:13 +02:00
Elias Schneider 0983e91169 fix: honor webauthn user verification setting 2026-07-21 14:59:51 +02:00
2cfbcb4b67 refactor: use actors for db configuration (#1604)
Co-authored-by: Claude <noreply@anthropic.com>
2026-07-20 08:48:05 +02:00
472fff33ea chore: update AAGUIDs (#1608)
Co-authored-by: stonith404 <58886915+stonith404@users.noreply.github.com>
2026-07-20 08:38:36 +02:00
921095f0a2 fix: relax Francis DB usage while HA is still WIP (#1602)
Co-authored-by: Claude <noreply@anthropic.com>
2026-07-18 21:32:27 +02:00
Alessandro (Ale) SegalaandGitHub b254d969a5 fix: sync group membership for users added at creation time (#1600) 2026-07-17 11:15:00 -07:00