Claude
0e0187dbc6
refactor: pass app config as explicit argument instead of request context
...
Remove the AppConfigMiddleware that stored an app-config resolver in the
request context and the FromCtx helper that read it back downstream.
Handlers now load the app config from AppConfigService and pass it as an
explicit argument to the service methods that need it, which then forward
it further down the call chain.
The webauthn and usersignup modules gain an AppConfigResolver dependency so
their handlers can load the config the same way. The email SendEmail and
LDAP SyncAll helpers drop their context-based variants in favor of the
explicit-config versions.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com >
Claude-Session: https://claude.ai/code/session_01YZ6SoJpmnLggZqactXxrak
2026-07-19 21:33:10 +00:00
ItalyPaleAle
3ecda60f3b
Completed code updates
2026-07-18 09:42:59 -07:00
ItalyPaleAle
4caaa079ca
Actor is done
2026-07-17 19:12:51 -07:00
ItalyPaleAle
1d2f991be5
More WIP
2026-07-13 07:13:00 -07:00
ItalyPaleAle
e4d0cbefbe
WIP
2026-07-11 12:19:04 -07:00
Elias Schneider
25dcad757a
feat: add support for unencrypted OIDC request parameter
2026-07-08 10:42:05 +02:00
Alessandro (Ale) Segala
eefd51cc4d
fix: various bugs in observability / OTel ( #1564 )
2026-07-05 14:14:39 -07:00
9607495ab4
refactor: integrate Francis actor framework for background jobs, cron scheduling, and rate limiting ( #1556 )
...
Co-authored-by: Elias Schneider <login@eliasschneider.com >
Co-authored-by: Claude <noreply@anthropic.com >
2026-07-03 08:36:45 +02:00
Elias Schneider
ecad31cae2
refactor: migrate signup functionality to single usersignup module
2026-06-30 20:53:31 +02:00
Elias Schneider
58fcf7cbe6
refactor: migrate Webauthn functionality to single webauthn module
2026-06-29 14:05:07 +02:00
Elias Schneider
9fce987106
refactor: migrate API key functionality to single apikey module
2026-06-29 12:11:18 +02:00
Elias Schneider
2ed703540d
fix: don't reject offline_accessscope
2026-06-26 14:43:22 +02:00
Elias Schneider
8158452b37
refactor: use fosite for OAuth 2.0 logic ( #1520 )
2026-06-22 18:42:02 +02:00
2e77d57282
fix: login code null submission and login code length check ( #1512 )
...
Co-authored-by: james <james@goldfish.net >
Co-authored-by: Kyle Mendell <kmendell@ofkm.us >
2026-06-20 20:42:50 +02:00
Elias Schneider
8a75774971
fix: callback URL validation not validated if prompt=none
2026-06-16 12:02:57 +02:00
Elias Schneider
3d9d4de619
fix: PAR parameters not respected by authorize page
2026-06-16 09:29:34 +02:00
Thibault NORMAND and Elias Schneider
68a5abdcca
feat(oauth): add support for Pushed Authorization Requests (RFC9126) ( #1404 )
...
Co-authored-by: Elias Schneider <login@eliasschneider.com >
2026-06-02 14:02:12 +02:00
Elias Schneider
9dd3d319cf
feat: delete OAuth refresh token on RP initiated logout ( #1480 )
2026-05-19 17:05:44 +02:00
da3489cfa5
fix(oidc): fall back to Basic auth when PKCE puts client_id in body ( #1466 )
...
Co-authored-by: mgabor3141 <@mgabor3141>
Co-authored-by: Gabor Mezo <git@mgabor.hu >
Co-authored-by: Alessandro (Ale) Segala <43508+ItalyPaleAle@users.noreply.github.com >
2026-05-07 23:01:51 -05:00
Alessandro (Ale) Segala and Elias Schneider
f4706cd6cc
feat: add support for "select_account" prompt ( #1453 )
...
Co-authored-by: Elias Schneider <login@eliasschneider.com >
2026-04-26 17:26:21 +00:00
Anthony Clerici
0ed2c48591
docs: add missing /api prefix to app config swagger routes ( #1454 )
2026-04-25 17:58:41 +02:00
Elias Schneider
444f7ff2b0
feat: return not found. on /setup if already completed
2026-04-19 20:13:19 +02:00
59fe481af9
feat: add OpenID Connect prompt Parameter Handling ( #1299 )
...
Co-authored-by: Copilot <198982749+Copilot@users.noreply.github.com >
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com >
Co-authored-by: Elias Schneider <login@eliasschneider.com >
2026-04-19 18:03:08 +02:00
Elias Schneider
5c4d7ff877
feat: add auth method claim (amr) to tokens ( #1433 )
2026-04-18 22:31:24 +02:00
33cceeafa8
feat: add ability to revoke passkeys of users as admin ( #1386 )
...
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com >
Co-authored-by: jose-d <7630424+jose-d@users.noreply.github.com >
Co-authored-by: Alessandro (Ale) Segala <43508+ItalyPaleAle@users.noreply.github.com >
Co-authored-by: Elias Schneider <login@eliasschneider.com >
2026-04-12 16:29:42 +00:00
Alessandro (Ale) Segala
2b94535ade
fix: disable callback URLs with protocols "javascript" and "data" ( #1397 )
2026-04-02 17:01:44 -07:00
Owen Voke
3700bd942d
feat: add token_endpoint_auth_methods_supported to .well-known ( #1388 )
2026-03-23 12:51:32 -05:00
192f71a13c
feat: allow clearing background image ( #1290 )
...
Co-authored-by: Kyle Mendell <kmendell@ofkm.us >
Co-authored-by: Kyle Mendell <ksm@ofkm.us >
2026-03-08 14:45:04 -05:00
f90f21b620
feat: allow use of svg, png, and ico images types for favicon ( #1289 )
...
Co-authored-by: Alessandro (Ale) Segala <43508+ItalyPaleAle@users.noreply.github.com >
Co-authored-by: Kyle Mendell <kmendell@ofkm.us >
2026-03-08 19:25:49 +00:00
Alessandro (Ale) Segala
27ca713cd4
fix: one-time-access-token route should get user ID from URL only ( #1358 )
2026-03-03 18:53:36 -08:00
4d22c2dbcf
fix: federated client credentials not working if sub ≠ client_id ( #1342 )
...
Co-authored-by: Copilot <198982749+Copilot@users.noreply.github.com >
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
2026-03-01 18:48:20 +01:00
Elias Schneider
0c41872cd4
fix: disallow API key renewal and creation with API key authentication ( #1334 )
2026-02-23 20:34:25 +01:00
Kyle Mendell
ae269371da
feat: current version api endpoint ( #1310 )
2026-02-22 10:39:19 -08:00
Alessandro (Ale) Segala
eb0456a395
fix: token endpoint must not accept params as query string args ( #1321 )
2026-02-17 22:31:09 -06:00
Yegor Pomortsev
6eebecd85a
fix: decode URL-encoded client ID and secret in Basic auth ( #1263 )
2026-01-24 20:52:17 +00:00
Moritz
a5629e63d2
fix: prevent deletion of OIDC provider logo for non admin/anonymous users ( #1267 )
2026-01-24 17:23:21 +01:00
Elias Schneider
1e7442f5df
feat: add support for email verification ( #1223 )
2026-01-11 12:31:26 +01:00
Elias Schneider
811e8772b6
feat: add option to renew API key ( #1214 )
2026-01-09 12:08:58 +01:00
Elias Schneider
579cfdc678
feat: add support for SCIM provisioning ( #1182 )
2026-01-02 17:54:20 +01:00
3420a00073
feat: add CLI command for importing and exporting Pocket ID data ( #998 )
...
Co-authored-by: Alessandro (Ale) Segala <43508+ItalyPaleAle@users.noreply.github.com >
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
2025-12-30 17:01:22 +01:00
Elias Schneider
f75cef83d5
feat: restrict oidc clients by user groups per default ( #1164 )
2025-12-24 09:09:25 +01:00
Elias Schneider
59ca6b26ac
feat: add ability define user groups for sign up tokens ( #1155 )
2025-12-21 18:26:52 +01:00
Melvin Snijders
f5da11b99b
feat: add email logo customization ( #1150 )
2025-12-17 16:20:22 +01:00
Elias Schneider
3eaf36aae7
fix: restrict email one time sign in token to same browser ( #1144 )
2025-12-12 14:51:07 +01:00
Alessandro (Ale) Segala and Elias Schneider
c56afe016e
feat: adding/removing passkeys creates an entry in audit logs ( #1099 )
...
Co-authored-by: Elias Schneider <login@eliasschneider.com >
2025-11-16 14:51:38 -08:00
Alessandro (Ale) Segala and Elias Schneider
29a1d3b778
feat: add database storage backend ( #1091 )
...
Co-authored-by: Elias Schneider <login@eliasschneider.com >
2025-11-16 18:23:46 +01:00
Elias Schneider and Alessandro Segala
bfd71d090c
feat: add support for S3 storage backend ( #1080 )
...
Co-authored-by: Alessandro (Ale) Segala <43508+ItalyPaleAle@users.noreply.github.com >
2025-11-10 09:02:25 +00:00
Elias Schneider and Alessandro Segala
ed2c7b2303
feat: add ability to set default profile picture ( #1061 )
...
Co-authored-by: Alessandro (Ale) Segala <43508+ItalyPaleAle@users.noreply.github.com >
2025-11-04 13:40:00 +01:00
Kyle Mendell and Elias Schneider
028d1c858e
feat: add support for dark mode oidc client icons ( #1039 )
...
Co-authored-by: Elias Schneider <login@eliasschneider.com >
2025-10-24 09:57:12 +02:00
Elias Schneider and Kyle Mendell
c20e93b55c
feat: add various improvements to the table component ( #961 )
...
Co-authored-by: Kyle Mendell <kmendell@ofkm.us >
2025-10-13 09:12:55 +00:00
Claude