ItalyPaleAle e5b8e36e8a feat: add explicit public keys for federated client credentials ...

A federated client credential could only point at a JWKS URL, which
requires the assertion issuer to host a discoverable JWKS.

This PR allows an admin to manually import public keys for FIC, so Pocket ID works better in air-gapped environments.

Also fixes an error introduced by #1679 where some text labels were not added to paraglide

2026-08-18 08:47:25 -07:00

..

cookie

fix: explicitly set SameSite to Lax for cookies

2026-08-03 22:58:01 +02:00

crypto

refactor: integrate Francis actor framework for background jobs, cron scheduling, and rate limiting (#1556)

2026-07-03 08:36:45 +02:00

image

refactor: standardize API error handling (#1635)

2026-08-02 23:36:06 +02:00

jwk

feat: add explicit public keys for federated client credentials

2026-08-18 08:47:25 -07:00

sqlite

refactor: integrate Francis actor framework for background jobs, cron scheduling, and rate limiting (#1556)

2026-07-03 08:36:45 +02:00

systemd

…

testing

refactor: migrate LDAP sync to an actor (#1651)

2026-08-07 09:18:30 -07:00

aaguid_util_test.go

…

aaguid_util.go

refactor: complete conversion of log calls to slog (#787)

2025-07-27 04:34:23 +00:00

cache_util.go

feat: add CSP header (#908)

2025-09-07 11:45:06 -07:00

callback_url_util_test.go

refactor: standardize API error handling (#1635)

2026-08-02 23:36:06 +02:00

callback_url_util.go

feat: implement OAuth Client ID Metadata Document (#1525) (#1526)

2026-08-02 15:05:39 +00:00

cmd_util.go

feat: add "key-rotate" command (#709)

2025-07-03 22:23:24 +02:00

csp_test.go

fix: CSP error with response_mode=form_post

2026-06-26 14:51:56 +02:00

csp.go

fix: CSP error with response_mode=form_post

2026-06-26 14:51:56 +02:00

date_time_util.go

…

db_migration_util.go

refactor: integrate Francis actor framework for background jobs, cron scheduling, and rate limiting (#1556)

2026-07-03 08:36:45 +02:00

db_util.go

feat: add CLI command for importing and exporting Pocket ID data (#998)

2025-12-30 17:01:22 +01:00

file_util_test.go

fix: decouple images from app config service (#965)

2025-09-20 21:42:52 +02:00

file_util.go

refactor: remove dead code

2026-06-22 21:58:55 +02:00

hash_util.go

feat: add qr code alternative sign in method (#1594)

2026-07-28 01:30:13 +02:00

http_util.go

refactor: remove dead code

2026-06-22 21:58:55 +02:00

ip_util_test.go

fix: block link-local addresses in SSRF protection

2026-07-13 11:05:24 +02:00

ip_util.go

feat: implement OAuth Client ID Metadata Document (#1525) (#1526)

2026-08-02 15:05:39 +00:00

json_util_test.go

fix: for one-time access tokens and signup tokens, pass TTLs instead of absolute expiration date (#855)

2025-08-22 08:02:56 +02:00

json_util.go

chore(deps): upgrade to node 24 and go 1.26.0 (#1328)

2026-02-23 19:50:44 +01:00

jwt_util.go

feat: allow introspection and device code endpoints to use Federated Client Credentials (#640)

2025-06-09 21:17:55 +02:00

list_request_util.go

chore(deps): upgrade to node 24 and go 1.26.0 (#1328)

2026-02-23 19:50:44 +01:00

ptr_util.go

chore(deps): upgrade to node 24 and go 1.26.0 (#1328)

2026-02-23 19:50:44 +01:00

sleep_util.go

feat: add support for SCIM provisioning (#1182)

2026-01-02 17:54:20 +01:00

stream_util.go

feat: add database storage backend (#1091)

2025-11-16 18:23:46 +01:00

string_util_test.go

feat: add qr code alternative sign in method (#1594)

2026-07-28 01:30:13 +02:00

string_util.go

feat: add qr code alternative sign in method (#1594)

2026-07-28 01:30:13 +02:00

type_util_test.go

feat: add various improvements to the table component (#961)

2025-10-13 09:12:55 +00:00

type_util.go

feat: add various improvements to the table component (#961)

2025-10-13 09:12:55 +00:00