Claude
bda95b2776
Add _maxconn SQLite connection string parameter
...
Lets the SQLite connection string set a custom max open connections
via a "_maxconn=n" query parameter, since the driver doesn't support
it natively. Zero or negative values fall back to the default, and
the parameter is ignored for in-memory databases, which must stay
capped at a single connection.
2026-08-07 08:03:08 +00:00
Copilot and stonith404
448d271c94
refactor: fix formatting ( #1666 )
...
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com >
Co-authored-by: stonith404 <58886915+stonith404@users.noreply.github.com >
2026-08-07 08:26:45 +02:00
Elias Schneider
535e831b20
fix: brotli compression ignored ( #1661 )
2026-08-07 07:16:02 +02:00
Elias Schneider and Alessandro Segala
06ccadfcd0
fix: separate TLS inputs and preserve certificate reloads ( #1653 )
...
Co-authored-by: Alessandro (Ale) Segala <43508+ItalyPaleAle@users.noreply.github.com >
2026-08-07 00:32:08 +00:00
Alessandro (Ale) Segala
1f9cc5e58e
fix: in non-HA mode, increase AlarmLeaseDuration ( #1660 )
2026-08-06 20:16:48 +02:00
Alessandro (Ale) Segala
22e3909c6c
refactor: move GeoLite to its own package ( #1647 )
2026-08-05 22:12:19 +02:00
Alessandro (Ale) Segala
1c9233c236
fix: make OIDC client token lifetimes optional ( #1650 )
2026-08-05 20:11:40 +00:00
Elias Schneider
95809dd29c
tests: remove invalid unit test
2026-08-05 22:01:43 +02:00
08407ae564
feat: include Francis data in Pocket ID backups ( #1645 )
...
Co-authored-by: Claude <noreply@anthropic.com >
Co-authored-by: Elias Schneider <login@eliasschneider.com >
2026-08-05 19:57:38 +00:00
Elias Schneider
140b5d3cb4
fix: don't skip rate limits for loopback addresses
2026-08-05 21:49:05 +02:00
Elias Schneider
488c50ef95
fix: respect log level in HTTP request logs
2026-08-04 23:12:22 +02:00
Alessandro (Ale) Segala
a526206669
feat: add observability to actors ( #1646 )
2026-08-04 12:31:11 -07:00
Elias Schneider
2c7d1b63e1
fix: don't rely on content length header for optional json binding
2026-08-04 21:10:17 +02:00
Elias Schneider
5d43c4aaeb
feat: add ability to customize session duration of clients ( #1641 )
2026-08-03 23:23:29 +02:00
Elias Schneider
1238bf0f37
fix: explicitly require JSON for request bodies
2026-08-03 22:58:08 +02:00
Elias Schneider
69d55ada6c
fix: explicitly set SameSite to Lax for cookies
2026-08-03 22:58:01 +02:00
Elias Schneider
db64b150be
fix: disable api key auth for webauthn register endpoints
2026-08-03 20:20:40 +02:00
Elias Schneider
7a4d0dd275
refactor: standardize API error handling ( #1635 )
2026-08-02 23:36:06 +02:00
Elias Schneider
598895e7c5
fix: session revoke fails if orphaned session tokens exist
2026-08-02 18:31:15 +02:00
Jean-François Roy and Elias Schneider
1934efa84c
feat: implement OAuth Client ID Metadata Document ( #1525 ) ( #1526 )
...
Co-authored-by: Elias Schneider <login@eliasschneider.com >
2026-08-02 15:05:39 +00:00
Elias Schneider
7c55bdf115
feat: make oauth access tokens RFC 9068 compliant
2026-08-02 15:59:21 +02:00
dependabot[bot]
d24a68d24f
chore(deps): Bump the "all-dependencies" group with 3 updates across multiple ecosystems ( #1639 )
2026-07-31 18:04:54 +02:00
Salvatore Catroppa
8815e5968b
fix: one-time-access-token CLI fails with "RuntimePSKs is required" ( #1637 )
2026-07-31 00:09:10 +02:00
Elias Schneider
e35be309a3
fix: decrease QR code login session duration to 5 minutes
2026-07-30 12:34:02 +02:00
Elias Schneider
0c5e0149cd
chore(deps): upgrade vulnerable dependencies
2026-07-30 00:43:11 +02:00
Elias Schneider
9e72bc1c70
feat: display country and city on qr code login approval screen
2026-07-30 00:22:31 +02:00
Elias Schneider
0c27f733b9
feat: drop user initiated one time access token login method
2026-07-29 23:49:08 +02:00
2ef7c93fee
feat: migrate app locks to Francis ( #1624 )
...
Co-authored-by: Elias Schneider <login@eliasschneider.com >
Co-authored-by: Kyle Mendell <kmendell@ofkm.us >
2026-07-29 22:15:40 +02:00
Elias Schneider and ItalyPaleAle
e1fd1d320f
feat: add qr code alternative sign in method ( #1594 )
...
Co-authored-by: ItalyPaleAle <43508+ItalyPaleAle@users.noreply.github.com >
2026-07-28 01:30:13 +02:00
Elias Schneider
968f97fa61
fix: fail early if webauthn session invalid
2026-07-28 00:42:41 +02:00
Elias Schneider
ca28ddcb04
fix: race condition in initial admin setup
2026-07-28 00:19:01 +02:00
Daniel Sandoval and ChatGPT
96fac69304
Merge commit from fork
...
Co-authored-by: ChatGPT <chatgpt@openai.com >
2026-07-27 20:38:19 +02:00
Elias Schneider
91d37126fa
chore: pin version of fosite fork
2026-07-27 20:37:09 +02:00
Elias Schneider
6bd058ac46
fix: make oidc device code redemption atomic
2026-07-27 20:32:42 +02:00
Elias Schneider
43aaccd5bf
refactor: modularize email module and use actor for email verification ( #1625 )
2026-07-27 20:00:59 +02:00
Elias Schneider
6bd4679bab
tests: correctly close filesystems
2026-07-26 23:30:36 +02:00
Elias Schneider
4743d5967a
fix: enforce user verification for login assertions
2026-07-26 19:09:12 +02:00
Markus Schanz
9f559788a4
feat: add support for declaritive client secret configuration ( #1619 )
2026-07-26 16:27:42 +02:00
Alessandro (Ale) Segala and Elias Schneider
a1b4e1d2b2
feat: migrate one-time and signup tokens to an actor ( #1611 )
...
Co-authored-by: Elias Schneider <login@eliasschneider.com >
2026-07-26 15:32:43 +02:00
Markus Schanz
80c7c4aaf1
feat: add declaritive user id configuration ( #1622 )
2026-07-25 23:43:16 +02:00
Elias Schneider
8563934fd5
refactor: use NewTextHandler instead of NewHandler for tint
2026-07-24 17:27:54 +02:00
dependabot[bot]
c57c27a004
chore(deps): Bump the "all-dependencies" group with 3 updates across multiple ecosystems ( #1621 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-24 17:21:42 +02:00
Elias Schneider
f6b02efe45
chore: upgrade vulnerable dependencies
2026-07-22 18:48:07 +02:00
Elias Schneider
e10f66c07a
fix: show only accessible clients on "My Apps" page
2026-07-22 18:33:57 +02:00
Elias Schneider
ad06ea6e00
fix: datatype mismatch between postgres and sqlite causes import to fail
2026-07-22 18:13:13 +02:00
Elias Schneider
0983e91169
fix: honor webauthn user verification setting
2026-07-21 14:59:51 +02:00
Alessandro (Ale) Segala and Claude
2cfbcb4b67
refactor: use actors for db configuration ( #1604 )
...
Co-authored-by: Claude <noreply@anthropic.com >
2026-07-20 08:48:05 +02:00
github-actions[bot] and stonith404
472fff33ea
chore: update AAGUIDs ( #1608 )
...
Co-authored-by: stonith404 <58886915+stonith404@users.noreply.github.com >
2026-07-20 08:38:36 +02:00
Alessandro (Ale) Segala and Claude
921095f0a2
fix: relax Francis DB usage while HA is still WIP ( #1602 )
...
Co-authored-by: Claude <noreply@anthropic.com >
2026-07-18 21:32:27 +02:00
Alessandro (Ale) Segala
b254d969a5
fix: sync group membership for users added at creation time ( #1600 )
2026-07-17 11:15:00 -07:00
Claude