github/pocket-id
1
0
Fork 0
mirror of https://github.com/pocket-id/pocket-id.git synced 2026-08-24 21:17:31 +00:00
Code Issues Packages Projects Releases Wiki Activity
1,344 Commits 17 Branches 130 Tags
v2.13.0
Commit Graph
487 Commits
Author SHA1 Message Date
Elias SchneiderandAlessandro Segala d6a47243db feat: add settings for limiting what passkeys can be used (#1662) 
Co-authored-by: Alessandro (Ale) Segala <43508+ItalyPaleAle@users.noreply.github.com>
 2026-08-07 11:17:38 +02:00
Copilotlnx01stonith404
 		448d271c94 refactor: fix formatting (#1666) 
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: stonith404 <58886915+stonith404@users.noreply.github.com>
 2026-08-07 08:26:45 +02:00
Elias SchneiderandAlessandro Segala 06ccadfcd0 fix: separate TLS inputs and preserve certificate reloads (#1653) 
Co-authored-by: Alessandro (Ale) Segala <43508+ItalyPaleAle@users.noreply.github.com>
 2026-08-07 00:32:08 +00:00
Alessandro (Ale) Segala 1f9cc5e58e fix: in non-HA mode, increase AlarmLeaseDuration (#1660) 2026-08-06 20:16:48 +02:00
Alessandro (Ale) Segala 22e3909c6c refactor: move GeoLite to its own package (#1647) 2026-08-05 22:12:19 +02:00
Alessandro (Ale) Segala 1c9233c236 fix: make OIDC client token lifetimes optional (#1650) 2026-08-05 20:11:40 +00:00
Elias Schneider 95809dd29c tests: remove invalid unit test 2026-08-05 22:01:43 +02:00
Alessandro (Ale) SegalaClaudeElias Schneider
 		08407ae564 feat: include Francis data in Pocket ID backups (#1645) 
Co-authored-by: Claude <noreply@anthropic.com>
Co-authored-by: Elias Schneider <login@eliasschneider.com>
 2026-08-05 19:57:38 +00:00
Elias Schneider 140b5d3cb4 fix: don't skip rate limits for loopback addresses 2026-08-05 21:49:05 +02:00
Elias Schneider 488c50ef95 fix: respect log level in HTTP request logs 2026-08-04 23:12:22 +02:00
Alessandro (Ale) Segala a526206669 feat: add observability to actors (#1646) 2026-08-04 12:31:11 -07:00
Elias Schneider 2c7d1b63e1 fix: don't rely on content length header for optional json binding 2026-08-04 21:10:17 +02:00
Elias Schneider 5d43c4aaeb feat: add ability to customize session duration of clients (#1641) 2026-08-03 23:23:29 +02:00
Elias Schneider 1238bf0f37 fix: explicitly require JSON for request bodies 2026-08-03 22:58:08 +02:00
Elias Schneider 69d55ada6c fix: explicitly set SameSite to Lax for cookies 2026-08-03 22:58:01 +02:00
Elias Schneider db64b150be fix: disable api key auth for webauthn register endpoints 2026-08-03 20:20:40 +02:00
Elias Schneider 7a4d0dd275 refactor: standardize API error handling (#1635) 2026-08-02 23:36:06 +02:00
Elias Schneider 598895e7c5 fix: session revoke fails if orphaned session tokens exist 2026-08-02 18:31:15 +02:00
Jean-François RoyandElias Schneider 1934efa84c feat: implement OAuth Client ID Metadata Document (#1525) (#1526) 
Co-authored-by: Elias Schneider <login@eliasschneider.com>
 2026-08-02 15:05:39 +00:00
Elias Schneider 7c55bdf115 feat: make oauth access tokens RFC 9068 compliant 2026-08-02 15:59:21 +02:00
Salvatore Catroppa 8815e5968b fix: one-time-access-token CLI fails with "RuntimePSKs is required" (#1637) 2026-07-31 00:09:10 +02:00
Elias Schneider e35be309a3 fix: decrease QR code login session duration to 5 minutes 2026-07-30 12:34:02 +02:00
Elias Schneider 9e72bc1c70 feat: display country and city on qr code login approval screen 2026-07-30 00:22:31 +02:00
Elias Schneider 0c27f733b9 feat: drop user initiated one time access token login method 2026-07-29 23:49:08 +02:00
Alessandro (Ale) SegalaElias SchneiderKyle Mendell
 		2ef7c93fee feat: migrate app locks to Francis (#1624) 
Co-authored-by: Elias Schneider <login@eliasschneider.com>
Co-authored-by: Kyle Mendell <kmendell@ofkm.us>
 2026-07-29 22:15:40 +02:00
Elias SchneiderandItalyPaleAle e1fd1d320f feat: add qr code alternative sign in method (#1594) 
Co-authored-by: ItalyPaleAle <43508+ItalyPaleAle@users.noreply.github.com>
 2026-07-28 01:30:13 +02:00
Elias Schneider 968f97fa61 fix: fail early if webauthn session invalid 2026-07-28 00:42:41 +02:00
Elias Schneider ca28ddcb04 fix: race condition in initial admin setup 2026-07-28 00:19:01 +02:00
Daniel SandovalandChatGPT 96fac69304 Merge commit from fork 
Co-authored-by: ChatGPT <chatgpt@openai.com>
 2026-07-27 20:38:19 +02:00
Elias Schneider 6bd058ac46 fix: make oidc device code redemption atomic 2026-07-27 20:32:42 +02:00
Elias Schneider 43aaccd5bf refactor: modularize email module and use actor for email verification (#1625) 2026-07-27 20:00:59 +02:00
Elias Schneider 6bd4679bab tests: correctly close filesystems 2026-07-26 23:30:36 +02:00
Elias Schneider 4743d5967a fix: enforce user verification for login assertions 2026-07-26 19:09:12 +02:00
Markus Schanz 9f559788a4 feat: add support for declaritive client secret configuration (#1619) 2026-07-26 16:27:42 +02:00
Alessandro (Ale) SegalaandElias Schneider a1b4e1d2b2 feat: migrate one-time and signup tokens to an actor (#1611) 
Co-authored-by: Elias Schneider <login@eliasschneider.com>
 2026-07-26 15:32:43 +02:00
Markus Schanz 80c7c4aaf1 feat: add declaritive user id configuration (#1622) 2026-07-25 23:43:16 +02:00
Elias Schneider 8563934fd5 refactor: use NewTextHandler instead of NewHandler for tint 2026-07-24 17:27:54 +02:00
Elias Schneider e10f66c07a fix: show only accessible clients on "My Apps" page 2026-07-22 18:33:57 +02:00
Elias Schneider ad06ea6e00 fix: datatype mismatch between postgres and sqlite causes import to fail 2026-07-22 18:13:13 +02:00
Elias Schneider 0983e91169 fix: honor webauthn user verification setting 2026-07-21 14:59:51 +02:00
Alessandro (Ale) SegalaandClaude 2cfbcb4b67 refactor: use actors for db configuration (#1604) 
Co-authored-by: Claude <noreply@anthropic.com>
 2026-07-20 08:48:05 +02:00
Alessandro (Ale) SegalaandClaude 921095f0a2 fix: relax Francis DB usage while HA is still WIP (#1602) 
Co-authored-by: Claude <noreply@anthropic.com>
 2026-07-18 21:32:27 +02:00
Alessandro (Ale) Segala b254d969a5 fix: sync group membership for users added at creation time (#1600) 2026-07-17 11:15:00 -07:00
Elias Schneider 807bd9e037 feat: add support for proxy protocol 2026-07-17 10:37:47 +02:00
Elias Schneider 9714296efb fix: block link-local addresses in SSRF protection 2026-07-13 11:05:24 +02:00
Elias Schneider 187cd8ddcd feat: add support for CIDR and IP address lists in TRUST_PROXY 2026-07-13 09:32:05 +02:00
Elias Schneider d9ead47d19 fix: allow insecure callback URLs by default until next major release 2026-07-13 09:21:53 +02:00
Alessandro (Ale) Segala cfda5f693b refactor: manage instance ID in the KV table (#1579) 2026-07-11 16:16:05 +02:00
Elias Schneider da3677f33d docs: fix wrong OpenAPI documentation 2026-07-10 15:44:28 +02:00
Alessandro (Ale) Segala b2711ced99 fix: /authorize endpoint crashes when list of scopes is empty (#1575) 2026-07-08 17:48:32 -07:00