Elias Schneider 915a6bcf08 feat: allow admins to auto grant APIs to CIMD clients (#1692)

2026-08-18 20:02:14 +02:00

..

20240731203656_init.up.sql

fix: sqlite migration drops allowed user groups

2025-08-24 23:07:50 +02:00

20240813211251_passkey_backup_flags..up.sql

fix: sqlite migration drops allowed user groups

2025-08-24 23:07:50 +02:00

20240813211251_passkey_backup_flags.down.sql

fix: sqlite migration drops allowed user groups

2025-08-24 23:07:50 +02:00

20240817191051_rename_config_table.down.sql

fix: sqlite migration drops allowed user groups

2025-08-24 23:07:50 +02:00

20240817191051_rename_config_table.up.sql

fix: sqlite migration drops allowed user groups

2025-08-24 23:07:50 +02:00

20240820205521_multiple_callback_urls.down.sql

fix: sqlite migration drops allowed user groups

2025-08-24 23:07:50 +02:00

20240820205521_multiple_callback_urls.up.sql

fix: sqlite migration drops allowed user groups

2025-08-24 23:07:50 +02:00

20240908123031_audit_log.down.sql

fix: sqlite migration drops allowed user groups

2025-08-24 23:07:50 +02:00

20240908123031_audit_log.up.sql

fix: sqlite migration drops allowed user groups

2025-08-24 23:07:50 +02:00

20240924202721_user_groups.down.sql

fix: sqlite migration drops allowed user groups

2025-08-24 23:07:50 +02:00

20240924202721_user_groups.up.sql

fix: sqlite migration drops allowed user groups

2025-08-24 23:07:50 +02:00

20241004092030_audit_log_location.down.sql

fix: sqlite migration drops allowed user groups

2025-08-24 23:07:50 +02:00

20241004092030_audit_log_location.up.sql

fix: sqlite migration drops allowed user groups

2025-08-24 23:07:50 +02:00

20241023072742_unix-timestamps.down.sql

fix: sqlite migration drops allowed user groups

2025-08-24 23:07:50 +02:00

20241023072742_unix-timestamps.up.sql

fix: sqlite migration drops allowed user groups

2025-08-24 23:07:50 +02:00

20241025214824_app_config_default_value.down.sql

fix: sqlite migration drops allowed user groups

2025-08-24 23:07:50 +02:00

20241025214824_app_config_default_value.up.sql

fix: sqlite migration drops allowed user groups

2025-08-24 23:07:50 +02:00

20241028064959_custom_claims.down.sql

fix: sqlite migration drops allowed user groups

2025-08-24 23:07:50 +02:00

20241028064959_custom_claims.up.sql

fix: sqlite migration drops allowed user groups

2025-08-24 23:07:50 +02:00

20241115131129_pkce.down.sql

fix: sqlite migration drops allowed user groups

2025-08-24 23:07:50 +02:00

20241115131129_pkce.up.sql

fix: sqlite migration drops allowed user groups

2025-08-24 23:07:50 +02:00

20250103145821_pkce_column.down.sql

fix: sqlite migration drops allowed user groups

2025-08-24 23:07:50 +02:00

20250103145821_pkce_column.up.sql

fix: sqlite migration drops allowed user groups

2025-08-24 23:07:50 +02:00

20250115155817_ldap.down.sql

fix: sqlite migration drops allowed user groups

2025-08-24 23:07:50 +02:00

20250115155817_ldap.up.sql

fix: sqlite migration drops allowed user groups

2025-08-24 23:07:50 +02:00

20250118180712_rename_email_config_variable.down.sql

fix: sqlite migration drops allowed user groups

2025-08-24 23:07:50 +02:00

20250118180712_rename_email_config_variable.up.sql

fix: sqlite migration drops allowed user groups

2025-08-24 23:07:50 +02:00

20250120102531_fix_empty_ldap_id_string.down.sql

fix: sqlite migration drops allowed user groups

2025-08-24 23:07:50 +02:00

20250120102531_fix_empty_ldap_id_string.up.sql

fix: sqlite migration drops allowed user groups

2025-08-24 23:07:50 +02:00

20250131154719_oidc_user_group_restriction.down.sql

fix: sqlite migration drops allowed user groups

2025-08-24 23:07:50 +02:00

20250131154719_oidc_user_group_restriction.up.sql

fix: sqlite migration drops allowed user groups

2025-08-24 23:07:50 +02:00

20250203082527_fix_empty_user_group_ldap_id_string.down.sql

fix: sqlite migration drops allowed user groups

2025-08-24 23:07:50 +02:00

20250203082527_fix_empty_user_group_ldap_id_string.up.sql

fix: sqlite migration drops allowed user groups

2025-08-24 23:07:50 +02:00

20250210152631_post_logout_url.down.sql

fix: sqlite migration drops allowed user groups

2025-08-24 23:07:50 +02:00

20250210152631_post_logout_url.up.sql

fix: sqlite migration drops allowed user groups

2025-08-24 23:07:50 +02:00

20250225182112_manual_smtp_tls_selection.down.sql

fix: sqlite migration drops allowed user groups

2025-08-24 23:07:50 +02:00

20250225182112_manual_smtp_tls_selection.up.sql

fix: sqlite migration drops allowed user groups

2025-08-24 23:07:50 +02:00

20250302220732_api_key_auth.down.sql

fix: sqlite migration drops allowed user groups

2025-08-24 23:07:50 +02:00

20250302220732_api_key_auth.up.sql

fix: sqlite migration drops allowed user groups

2025-08-24 23:07:50 +02:00

20250320171311_user_locale.down.sql

fix: sqlite migration drops allowed user groups

2025-08-24 23:07:50 +02:00

20250320171311_user_locale.up.sql

fix: sqlite migration drops allowed user groups

2025-08-24 23:07:50 +02:00

20250323184520_oidc_refresh_tokens.down.sql

fix: sqlite migration drops allowed user groups

2025-08-24 23:07:50 +02:00

20250323184520_oidc_refresh_tokens.up.sql

fix: sqlite migration drops allowed user groups

2025-08-24 23:07:50 +02:00

20250403082322_audit_logs_indexes.down.sql

fix: sqlite migration drops allowed user groups

2025-08-24 23:07:50 +02:00

20250403082322_audit_logs_indexes.up.sql

fix: sqlite migration drops allowed user groups

2025-08-24 23:07:50 +02:00

20250408120918_app_config_cols.down.sql

fix: sqlite migration drops allowed user groups

2025-08-24 23:07:50 +02:00

20250408120918_app_config_cols.up.sql

fix: sqlite migration drops allowed user groups

2025-08-24 23:07:50 +02:00

20250412000000_add_user_disabled_field.down.sql

fix: sqlite migration drops allowed user groups

2025-08-24 23:07:50 +02:00

20250412000000_add_user_disabled_field.up.sql

fix: sqlite migration drops allowed user groups

2025-08-24 23:07:50 +02:00

20250417120000_add_expiration_email_sent_to_api_keys.down.sql

fix: sqlite migration drops allowed user groups

2025-08-24 23:07:50 +02:00

20250417120000_add_expiration_email_sent_to_api_keys.up.sql

fix: sqlite migration drops allowed user groups

2025-08-24 23:07:50 +02:00

20250421221059_add_device_codes.down.sql

fix: sqlite migration drops allowed user groups

2025-08-24 23:07:50 +02:00

20250421221059_add_device_codes.up.sql

fix: sqlite migration drops allowed user groups

2025-08-24 23:07:50 +02:00

20250601204251_clear_default_app_config_variables.down.sql

fix: sqlite migration drops allowed user groups

2025-08-24 23:07:50 +02:00

20250601204251_clear_default_app_config_variables.up.sql

fix: sqlite migration drops allowed user groups

2025-08-24 23:07:50 +02:00

20250609202611_client_credentials.down.sql

fix: sqlite migration drops allowed user groups

2025-08-24 23:07:50 +02:00

20250609202611_client_credentials.up.sql

fix: sqlite migration drops allowed user groups

2025-08-24 23:07:50 +02:00

20250619115053_add_country_index.down.sql

fix: sqlite migration drops allowed user groups

2025-08-24 23:07:50 +02:00

20250619115053_add_country_index.up.sql

fix: sqlite migration drops allowed user groups

2025-08-24 23:07:50 +02:00

20250622151258_add_signup_tokens.down.sql

fix: sqlite migration drops allowed user groups

2025-08-24 23:07:50 +02:00

20250622151258_add_signup_tokens.up.sql

fix: sqlite migration drops allowed user groups

2025-08-24 23:07:50 +02:00

20250628000000_audit_logs_ip_null.down.sql

fix: sqlite migration drops allowed user groups

2025-08-24 23:07:50 +02:00

20250628000000_audit_logs_ip_null.up.sql

fix: sqlite migration drops allowed user groups

2025-08-24 23:07:50 +02:00

20250630000000_kv_table.down.sql

fix: sqlite migration drops allowed user groups

2025-08-24 23:07:50 +02:00

20250630000000_kv_table.up.sql

fix: sqlite migration drops allowed user groups

2025-08-24 23:07:50 +02:00

20250705000000_normalize.down.sql

fix: sqlite migration drops allowed user groups

2025-08-24 23:07:50 +02:00

20250705000000_normalize.up.sql

fix: sqlite migration drops allowed user groups

2025-08-24 23:07:50 +02:00

20250810144214_apps_dashboard.down.sql

fix: sqlite migration drops allowed user groups

2025-08-24 23:07:50 +02:00

20250810144214_apps_dashboard.up.sql

fix: sqlite migration drops allowed user groups

2025-08-24 23:07:50 +02:00

20250814121300_requires_reauthentication.down.sql

fix: sqlite migration drops allowed user groups

2025-08-24 23:07:50 +02:00

20250814121300_requires_reauthentication.up.sql

fix: sqlite migration drops allowed user groups

2025-08-24 23:07:50 +02:00

20250822000000_foreign_keys_improvements.down.sql

fix: enable foreign key check for sqlite (#863)

2025-08-23 17:54:51 +02:00

20250822000000_foreign_keys_improvements.up.sql

fix: sqlite migration drops allowed user groups

2025-08-24 23:07:50 +02:00

20250917170000_user_display_name_and_username.down.sql

feat: allow uppercase usernames (#958)

2025-09-17 14:43:12 -05:00

20250917170000_user_display_name_and_username.up.sql

feat: allow uppercase usernames (#958)

2025-09-17 14:43:12 -05:00

20251001115300_optional_email.down.sql

feat: add the ability to make email optional (#994)

2025-10-03 11:24:53 +02:00

20251001115300_optional_email.up.sql

feat: add the ability to make email optional (#994)

2025-10-03 11:24:53 +02:00

20251018000000_add_dark_logo.down.sql

feat: add support for dark mode oidc client icons (#1039)

2025-10-24 09:57:12 +02:00

20251018000000_add_dark_logo.up.sql

feat: add support for dark mode oidc client icons (#1039)

2025-10-24 09:57:12 +02:00

20251024000000_webauthn_credential_params.down.sql

chore: upgrade dependencies

2025-10-24 12:18:38 +02:00

20251024000000_webauthn_credential_params.up.sql

chore: upgrade dependencies

2025-10-24 12:18:38 +02:00

20251110000000_storage_table.down.sql

feat: add database storage backend (#1091)

2025-11-16 18:23:46 +01:00

20251110000000_storage_table.up.sql

feat: add database storage backend (#1091)

2025-11-16 18:23:46 +01:00

20251115000000_api_keys_expires_at_index.down.sql

feat: add database storage backend (#1091)

2025-11-16 18:23:46 +01:00

20251115000000_api_keys_expires_at_index.up.sql

feat: add database storage backend (#1091)

2025-11-16 18:23:46 +01:00

20251210000000_one_time_access_device_token.down.sql

feat: add ability define user groups for sign up tokens (#1155)

2025-12-21 18:26:52 +01:00

20251210000000_one_time_access_device_token.up.sql

feat: add ability define user groups for sign up tokens (#1155)

2025-12-21 18:26:52 +01:00

20251217000000_signup_token_groups.down.sql

feat: add ability define user groups for sign up tokens (#1155)

2025-12-21 18:26:52 +01:00

20251217000000_signup_token_groups.up.sql

feat: add ability define user groups for sign up tokens (#1155)

2025-12-21 18:26:52 +01:00

20251217141000_v2_export_normalization.down.sql

chore: preparation for merge into main branch

2025-12-30 17:01:22 +01:00

20251217141000_v2_export_normalization.up.sql

fix: migration fails if users exist with no email address

2026-01-03 15:06:34 +01:00

20251219000000_oidc_client_group_restriction.down.sql

feat: restrict oidc clients by user groups per default (#1164)

2025-12-24 09:09:25 +01:00

20251219000000_oidc_client_group_restriction.up.sql

feat: restrict oidc clients by user groups per default (#1164)

2025-12-24 09:09:25 +01:00

20251229173100_scim_service_providers.down.sql

feat: add support for SCIM provisioning (#1182)

2026-01-02 17:54:20 +01:00

20251229173100_scim_service_providers.up.sql

feat: add support for SCIM provisioning (#1182)

2026-01-02 17:54:20 +01:00

20260102231700_ldap_admin_group_rename.down.sql

fix: admins imported from LDAP lose admin privileges

2026-01-02 23:42:25 +01:00

20260102231700_ldap_admin_group_rename.up.sql

fix: migration fails if users exist with no email address

2026-01-03 15:06:34 +01:00

20260103142200_user_nullable_fields.down.sql

fix: migration fails if users exist with no email address

2026-01-03 15:06:34 +01:00

20260103142200_user_nullable_fields.up.sql

fix: migration fails if users exist with no email address

2026-01-03 15:06:34 +01:00

20260104190900_add_nonce_to_device_codes.down.sql

feat: process nonce within device authorization flow (#1185)

2026-01-04 18:18:17 +00:00

20260104190900_add_nonce_to_device_codes.up.sql

feat: process nonce within device authorization flow (#1185)

2026-01-04 18:18:17 +00:00

20260106140900_sqlite_export_normalization.down.sql

fix: data import from sqlite to postgres fails because of wrong datatype

2026-01-06 16:08:49 +01:00

20260106140900_sqlite_export_normalization.up.sql

fix: data import from sqlite to postgres fails because of wrong datatype

2026-01-06 16:08:49 +01:00

20260109090200_email_verification.down.sql

feat: add support for email verification (#1223)

2026-01-11 12:31:26 +01:00

20260109090200_email_verification.up.sql

feat: add support for email verification (#1223)

2026-01-11 12:31:26 +01:00

20260304090200_indexes.down.sql

fix: various fixes in background jobs (#1362)

2026-03-07 17:07:26 +00:00

20260304090200_indexes.up.sql

fix: various fixes in background jobs (#1362)

2026-03-07 17:07:26 +00:00

20260418120000_oidc_amr_claim.down.sql

feat: delete OAuth refresh token on RP initiated logout (#1480)

2026-05-19 17:05:44 +02:00

20260418120000_oidc_amr_claim.up.sql

feat: delete OAuth refresh token on RP initiated logout (#1480)

2026-05-19 17:05:44 +02:00

20260518222000_oidc_refresh_token_id_token_jti.down.sql

feat: delete OAuth refresh token on RP initiated logout (#1480)

2026-05-19 17:05:44 +02:00

20260518222000_oidc_refresh_token_id_token_jti.up.sql

feat: delete OAuth refresh token on RP initiated logout (#1480)

2026-05-19 17:05:44 +02:00

20260601154900_par.down.sql

chore: wrap last two migrations into transaction

2026-06-22 18:44:48 +02:00

20260601154900_par.up.sql

chore: wrap last two migrations into transaction

2026-06-22 18:44:48 +02:00

20260607120000_oauth2_storage.down.sql

chore: wrap last two migrations into transaction

2026-06-22 18:44:48 +02:00

20260607120000_oauth2_storage.up.sql

chore: wrap last two migrations into transaction

2026-06-22 18:44:48 +02:00

20260626120000_oidc_client_skip_consent.down.sql

feat: add ability to skip consent for client

2026-06-26 23:35:26 +02:00

20260626120000_oidc_client_skip_consent.up.sql

feat: add ability to skip consent for client

2026-06-26 23:35:26 +02:00

20260626153900_add_pkce_supported_to_oidc_clients.down.sql

refactor: rename migrations

2026-07-07 17:16:10 +02:00

20260626153900_add_pkce_supported_to_oidc_clients.up.sql

refactor: rename migrations

2026-07-07 17:16:10 +02:00

20260707170000_oauth_apis.down.sql

refactor: rename migrations

2026-07-07 17:16:10 +02:00

20260707170000_oauth_apis.up.sql

refactor: rename migrations

2026-07-07 17:16:10 +02:00

20260708120000_add_oidc_client_description.down.sql

feat: add description field to oidc clients (#1547)

2026-07-08 13:41:51 +02:00

20260708120000_add_oidc_client_description.up.sql

feat: add description field to oidc clients (#1547)

2026-07-08 13:41:51 +02:00

20260708130000_move_instance_id_to_kv.down.sql

refactor: manage instance ID in the KV table (#1579)

2026-07-11 16:16:05 +02:00

20260708130000_move_instance_id_to_kv.up.sql

refactor: manage instance ID in the KV table (#1579)

2026-07-11 16:16:05 +02:00

20260718000000_freeze_config.down.sql

refactor: use actors for db configuration (#1604)

2026-07-20 08:48:05 +02:00

20260718000000_freeze_config.up.sql

refactor: use actors for db configuration (#1604)

2026-07-20 08:48:05 +02:00

20260722120000_oauth_storage_export_normalization.down.sql

fix: datatype mismatch between postgres and sqlite causes import to fail

2026-07-22 18:13:13 +02:00

20260722120000_oauth_storage_export_normalization.up.sql

fix: datatype mismatch between postgres and sqlite causes import to fail

2026-07-22 18:13:13 +02:00

20260723000000_actor_tokens.down.sql

feat: migrate one-time and signup tokens to an actor (#1611)

2026-07-26 15:32:43 +02:00

20260723000000_actor_tokens.up.sql

feat: migrate one-time and signup tokens to an actor (#1611)

2026-07-26 15:32:43 +02:00

20260727120000_email_verification_actors.down.sql

refactor: modularize email module and use actor for email verification (#1625)

2026-07-27 20:00:59 +02:00

20260727120000_email_verification_actors.up.sql

refactor: modularize email module and use actor for email verification (#1625)

2026-07-27 20:00:59 +02:00

20260728120000_oidc_client_id_metadata_document.down.sql

feat: implement OAuth Client ID Metadata Document (#1525) (#1526)

2026-08-02 15:05:39 +00:00

20260728120000_oidc_client_id_metadata_document.up.sql

feat: implement OAuth Client ID Metadata Document (#1525) (#1526)

2026-08-02 15:05:39 +00:00

20260731120000_oauth2_session_ownership.down.sql

fix: session revoke fails if orphaned session tokens exist

2026-08-02 18:31:15 +02:00

20260731120000_oauth2_session_ownership.up.sql

fix: session revoke fails if orphaned session tokens exist

2026-08-02 18:31:15 +02:00

20260802120000_add_oidc_client_token_lifetimes.down.sql

feat: add ability to customize session duration of clients (#1641)

2026-08-03 23:23:29 +02:00

20260802120000_add_oidc_client_token_lifetimes.up.sql

feat: add ability to customize session duration of clients (#1641)

2026-08-03 23:23:29 +02:00

20260807120000_oidc_client_multiple_secrets.down.sql

feat: support multiple client secrets per OIDC client (#1679)

2026-08-11 00:54:52 +00:00

20260807120000_oidc_client_multiple_secrets.up.sql

feat: support multiple client secrets per OIDC client (#1679)

2026-08-11 00:54:52 +00:00

20260814120000_api_client_access.down.sql

feat: allow admins to auto grant APIs to CIMD clients (#1692)

2026-08-18 20:02:14 +02:00

20260814120000_api_client_access.up.sql

feat: allow admins to auto grant APIs to CIMD clients (#1692)

2026-08-18 20:02:14 +02:00