 
|
d6a47243db
|
feat: add settings for limiting what passkeys can be used (#1662)
Co-authored-by: Alessandro (Ale) Segala <43508+ItalyPaleAle@users.noreply.github.com>
|
2026-08-07 11:17:38 +02:00 |
|
  
|
448d271c94
|
refactor: fix formatting (#1666)
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: stonith404 <58886915+stonith404@users.noreply.github.com>
|
2026-08-07 08:26:45 +02:00 |
|
 Elias SchneiderandGitHub
|
535e831b20
|
fix: brotli compression ignored (#1661)
|
2026-08-07 07:16:02 +02:00 |
|
 
|
06ccadfcd0
|
fix: separate TLS inputs and preserve certificate reloads (#1653)
Co-authored-by: Alessandro (Ale) Segala <43508+ItalyPaleAle@users.noreply.github.com>
|
2026-08-07 00:32:08 +00:00 |
|
 Alessandro (Ale) SegalaandGitHub
|
1f9cc5e58e
|
fix: in non-HA mode, increase AlarmLeaseDuration (#1660)
|
2026-08-06 20:16:48 +02:00 |
|
 Alessandro (Ale) SegalaandGitHub
|
22e3909c6c
|
refactor: move GeoLite to its own package (#1647)
|
2026-08-05 22:12:19 +02:00 |
|
 Alessandro (Ale) SegalaandGitHub
|
1c9233c236
|
fix: make OIDC client token lifetimes optional (#1650)
|
2026-08-05 20:11:40 +00:00 |
|
Elias Schneider
|
95809dd29c
|
tests: remove invalid unit test
|
2026-08-05 22:01:43 +02:00 |
|
  
|
08407ae564
|
feat: include Francis data in Pocket ID backups (#1645)
Co-authored-by: Claude <noreply@anthropic.com>
Co-authored-by: Elias Schneider <login@eliasschneider.com>
|
2026-08-05 19:57:38 +00:00 |
|
Elias Schneider
|
140b5d3cb4
|
fix: don't skip rate limits for loopback addresses
|
2026-08-05 21:49:05 +02:00 |
|
Elias Schneider
|
488c50ef95
|
fix: respect log level in HTTP request logs
|
2026-08-04 23:12:22 +02:00 |
|
 Alessandro (Ale) SegalaandGitHub
|
a526206669
|
feat: add observability to actors (#1646)
|
2026-08-04 12:31:11 -07:00 |
|
Elias Schneider
|
2c7d1b63e1
|
fix: don't rely on content length header for optional json binding
|
2026-08-04 21:10:17 +02:00 |
|
 Elias SchneiderandGitHub
|
5d43c4aaeb
|
feat: add ability to customize session duration of clients (#1641)
|
2026-08-03 23:23:29 +02:00 |
|
Elias Schneider
|
1238bf0f37
|
fix: explicitly require JSON for request bodies
|
2026-08-03 22:58:08 +02:00 |
|
Elias Schneider
|
69d55ada6c
|
fix: explicitly set SameSite to Lax for cookies
|
2026-08-03 22:58:01 +02:00 |
|
Elias Schneider
|
db64b150be
|
fix: disable api key auth for webauthn register endpoints
|
2026-08-03 20:20:40 +02:00 |
|
 Elias SchneiderandGitHub
|
7a4d0dd275
|
refactor: standardize API error handling (#1635)
|
2026-08-02 23:36:06 +02:00 |
|
Elias Schneider
|
598895e7c5
|
fix: session revoke fails if orphaned session tokens exist
|
2026-08-02 18:31:15 +02:00 |
|
 
|
1934efa84c
|
feat: implement OAuth Client ID Metadata Document (#1525) (#1526)
Co-authored-by: Elias Schneider <login@eliasschneider.com>
|
2026-08-02 15:05:39 +00:00 |
|
Elias Schneider
|
7c55bdf115
|
feat: make oauth access tokens RFC 9068 compliant
|
2026-08-02 15:59:21 +02:00 |
|
 dependabot[bot]andGitHub
|
d24a68d24f
|
chore(deps): Bump the "all-dependencies" group with 3 updates across multiple ecosystems (#1639)
|
2026-07-31 18:04:54 +02:00 |
|
 Salvatore CatroppaandGitHub
|
8815e5968b
|
fix: one-time-access-token CLI fails with "RuntimePSKs is required" (#1637)
|
2026-07-31 00:09:10 +02:00 |
|
Elias Schneider
|
e35be309a3
|
fix: decrease QR code login session duration to 5 minutes
|
2026-07-30 12:34:02 +02:00 |
|
Elias Schneider
|
0c5e0149cd
|
chore(deps): upgrade vulnerable dependencies
|
2026-07-30 00:43:11 +02:00 |
|
Elias Schneider
|
9e72bc1c70
|
feat: display country and city on qr code login approval screen
|
2026-07-30 00:22:31 +02:00 |
|
Elias Schneider
|
0c27f733b9
|
feat: drop user initiated one time access token login method
|
2026-07-29 23:49:08 +02:00 |
|
  
|
2ef7c93fee
|
feat: migrate app locks to Francis (#1624)
Co-authored-by: Elias Schneider <login@eliasschneider.com>
Co-authored-by: Kyle Mendell <kmendell@ofkm.us>
|
2026-07-29 22:15:40 +02:00 |
|
 
|
e1fd1d320f
|
feat: add qr code alternative sign in method (#1594)
Co-authored-by: ItalyPaleAle <43508+ItalyPaleAle@users.noreply.github.com>
|
2026-07-28 01:30:13 +02:00 |
|
Elias Schneider
|
968f97fa61
|
fix: fail early if webauthn session invalid
|
2026-07-28 00:42:41 +02:00 |
|
Elias Schneider
|
ca28ddcb04
|
fix: race condition in initial admin setup
|
2026-07-28 00:19:01 +02:00 |
|
 
|
96fac69304
|
Merge commit from fork
Co-authored-by: ChatGPT <chatgpt@openai.com>
|
2026-07-27 20:38:19 +02:00 |
|
Elias Schneider
|
91d37126fa
|
chore: pin version of fosite fork
|
2026-07-27 20:37:09 +02:00 |
|
Elias Schneider
|
6bd058ac46
|
fix: make oidc device code redemption atomic
|
2026-07-27 20:32:42 +02:00 |
|
 Elias SchneiderandGitHub
|
43aaccd5bf
|
refactor: modularize email module and use actor for email verification (#1625)
|
2026-07-27 20:00:59 +02:00 |
|
Elias Schneider
|
6bd4679bab
|
tests: correctly close filesystems
|
2026-07-26 23:30:36 +02:00 |
|
Elias Schneider
|
4743d5967a
|
fix: enforce user verification for login assertions
|
2026-07-26 19:09:12 +02:00 |
|
 Markus SchanzandGitHub
|
9f559788a4
|
feat: add support for declaritive client secret configuration (#1619)
|
2026-07-26 16:27:42 +02:00 |
|
 
|
a1b4e1d2b2
|
feat: migrate one-time and signup tokens to an actor (#1611)
Co-authored-by: Elias Schneider <login@eliasschneider.com>
|
2026-07-26 15:32:43 +02:00 |
|
 Markus SchanzandGitHub
|
80c7c4aaf1
|
feat: add declaritive user id configuration (#1622)
|
2026-07-25 23:43:16 +02:00 |
|
Elias Schneider
|
8563934fd5
|
refactor: use NewTextHandler instead of NewHandler for tint
|
2026-07-24 17:27:54 +02:00 |
|
 
|
c57c27a004
|
chore(deps): Bump the "all-dependencies" group with 3 updates across multiple ecosystems (#1621)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2026-07-24 17:21:42 +02:00 |
|
Elias Schneider
|
f6b02efe45
|
chore: upgrade vulnerable dependencies
|
2026-07-22 18:48:07 +02:00 |
|
Elias Schneider
|
e10f66c07a
|
fix: show only accessible clients on "My Apps" page
|
2026-07-22 18:33:57 +02:00 |
|
Elias Schneider
|
ad06ea6e00
|
fix: datatype mismatch between postgres and sqlite causes import to fail
|
2026-07-22 18:13:13 +02:00 |
|
Elias Schneider
|
0983e91169
|
fix: honor webauthn user verification setting
|
2026-07-21 14:59:51 +02:00 |
|
 
|
2cfbcb4b67
|
refactor: use actors for db configuration (#1604)
Co-authored-by: Claude <noreply@anthropic.com>
|
2026-07-20 08:48:05 +02:00 |
|
 
|
472fff33ea
|
chore: update AAGUIDs (#1608)
Co-authored-by: stonith404 <58886915+stonith404@users.noreply.github.com>
|
2026-07-20 08:38:36 +02:00 |
|
 
|
921095f0a2
|
fix: relax Francis DB usage while HA is still WIP (#1602)
Co-authored-by: Claude <noreply@anthropic.com>
|
2026-07-18 21:32:27 +02:00 |
|
 Alessandro (Ale) SegalaandGitHub
|
b254d969a5
|
fix: sync group membership for users added at creation time (#1600)
|
2026-07-17 11:15:00 -07:00 |
|