 Elias Schneider
|
d259a15131
|
feat: restore old behavior of automatically creating client secret
|
2026-09-23 22:00:43 +02:00 |
|
|
|
2075de3234
|
feat: add OIDC back-channel logout (#1734)
Co-authored-by: Alessandro (Ale) Segala <43508+ItalyPaleAle@users.noreply.github.com>
Co-authored-by: Elias Schneider <login@eliasschneider.com>
|
2026-09-23 21:34:38 +02:00 |
|
|
Elias Schneider
|
5cbacd81e6
|
fix: limit JPG and PNG pixels to prevent decompression bomb
|
2026-09-15 14:51:06 +02:00 |
|
|
Alessandro (Ale) Segala
|
fa8aa44706
|
chore: update Francis to rc.2 (#1728)
|
2026-08-31 05:15:48 -07:00 |
|
|
Alessandro (Ale) Segalaandcopilot-swe-agent[bot]
|
7c79a9e14b
|
feat: add explicit public keys for federated client credentials (#1702)
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
|
2026-08-28 21:12:15 +00:00 |
|
|
Kyle Mendell
|
d75523fed0
|
feat: list allowed groups when hovering over allowed group count (#1671)
|
2026-08-25 18:30:16 +02:00 |
|
|
Alessandro (Ale) Segalaandcopilot-swe-agent[bot]
|
8c095afd78
|
refactor: migrate SCIM sync to actor + add tests (#1680)
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
|
2026-08-18 21:54:06 +02:00 |
|
|
Alessandro (Ale) Segala
|
155a1fcba0
|
feat: support multiple client secrets per OIDC client (#1679)
|
2026-08-11 00:54:52 +00:00 |
|
|
Elias Schneider
|
3ca9a55c71
|
feat: hide apps without launch url on My Apps page
|
2026-08-10 22:53:35 +02:00 |
|
|
Alessandro (Ale) Segala
|
1c9233c236
|
fix: make OIDC client token lifetimes optional (#1650)
|
2026-08-05 20:11:40 +00:00 |
|
|
Elias Schneider
|
5d43c4aaeb
|
feat: add ability to customize session duration of clients (#1641)
|
2026-08-03 23:23:29 +02:00 |
|
|
Elias Schneider
|
7a4d0dd275
|
refactor: standardize API error handling (#1635)
|
2026-08-02 23:36:06 +02:00 |
|
|
Jean-François RoyandElias Schneider
|
1934efa84c
|
feat: implement OAuth Client ID Metadata Document (#1525) (#1526)
Co-authored-by: Elias Schneider <login@eliasschneider.com>
|
2026-08-02 15:05:39 +00:00 |
|
|
Markus Schanz
|
9f559788a4
|
feat: add support for declaritive client secret configuration (#1619)
|
2026-07-26 16:27:42 +02:00 |
|
|
Elias Schneider
|
e10f66c07a
|
fix: show only accessible clients on "My Apps" page
|
2026-07-22 18:33:57 +02:00 |
|
|
Alessandro (Ale) SegalaandClaude
|
2cfbcb4b67
|
refactor: use actors for db configuration (#1604)
Co-authored-by: Claude <noreply@anthropic.com>
|
2026-07-20 08:48:05 +02:00 |
|
|
Sean McKenzieandElias Schneider
|
6734585712
|
feat: add description field to oidc clients (#1547)
Co-authored-by: Elias Schneider <login@eliasschneider.com>
|
2026-07-08 13:41:51 +02:00 |
|
|
|
97bd466f38
|
feat: prompt admin with PKCE client support hint (#1499)
Co-authored-by: james <james@goldfish.net>
Co-authored-by: Alessandro (Ale) Segala <43508+ItalyPaleAle@users.noreply.github.com>
Co-authored-by: Elias Schneider <login@eliasschneider.com>
Co-authored-by: Kyle Mendell <kmendell@ofkm.us>
|
2026-06-28 11:10:30 -07:00 |
|
|
Elias Schneider
|
d467855870
|
feat: add ability to skip consent for client
|
2026-06-26 23:35:26 +02:00 |
|
|
Elias Schneider
|
8158452b37
|
refactor: use fosite for OAuth 2.0 logic (#1520)
|
2026-06-22 18:42:02 +02:00 |
|
|
Elias Schneider
|
8a75774971
|
fix: callback URL validation not validated if prompt=none
|
2026-06-16 12:02:57 +02:00 |
|
|
Elias Schneider
|
3d9d4de619
|
fix: PAR parameters not respected by authorize page
|
2026-06-16 09:29:34 +02:00 |
|
|
Elias Schneider
|
4f97cd4188
|
refactor: fix linter issues
|
2026-06-02 14:08:33 +02:00 |
|
|
Thibault NORMANDandElias Schneider
|
68a5abdcca
|
feat(oauth): add support for Pushed Authorization Requests (RFC9126) (#1404)
Co-authored-by: Elias Schneider <login@eliasschneider.com>
|
2026-06-02 14:02:12 +02:00 |
|
|
Elias Schneider
|
5db570bf66
|
feat: remove EXIF/XMP metadata from uploaded images (#1477)
|
2026-05-19 20:56:14 -07:00 |
|
|
Elias Schneider
|
9dd3d319cf
|
feat: delete OAuth refresh token on RP initiated logout (#1480)
|
2026-05-19 17:05:44 +02:00 |
|
|
Elias Schneider
|
cc9163f577
|
fix: make stream of downloaded logos seekable for S3 checksum calculation
|
2026-05-19 16:28:30 +02:00 |
|
|
Elias Schneider
|
b27a52a591
|
revert: delete refresh tokens on end-session to prevent reuse after logout (#1458)
This reverts commit 7aacbd0245.
|
2026-05-18 23:36:39 +02:00 |
|
|
Elias Schneider
|
ce6bdb9d7e
|
fix: reject unknown PKCE code challenge methods
|
2026-05-18 22:07:20 +02:00 |
|
|
wucm667andAlessandro Segala
|
7aacbd0245
|
fix(oidc): delete refresh tokens on end-session to prevent reuse after logout (#1458)
Co-authored-by: Alessandro (Ale) Segala <43508+ItalyPaleAle@users.noreply.github.com>
Signed-off-by: wucm667 <stevenwucongmin@gmail.com>
|
2026-05-15 21:25:40 +00:00 |
|
|
Alessandro (Ale) SegalaandElias Schneider
|
f4706cd6cc
|
feat: add support for "select_account" prompt (#1453)
Co-authored-by: Elias Schneider <login@eliasschneider.com>
|
2026-04-26 17:26:21 +00:00 |
|
|
Elias Schneider
|
e33a9b8c88
|
chore: post dependency upgrade fixes
|
2026-04-26 15:46:35 +02:00 |
|
|
|
64d4ac7919
|
feat: add support for response_mode=form_post (#1360)
Co-authored-by: Alessandro (Ale) Segala <43508+ItalyPaleAle@users.noreply.github.com>
Co-authored-by: Kyle Mendell <kmendell@ofkm.us>
Co-authored-by: Elias Schneider <login@eliasschneider.com>
|
2026-04-26 14:11:35 +02:00 |
|
|
Elias Schneider
|
978ac87def
|
fix: access token renewal bypasses important checks
|
2026-04-19 18:27:44 +02:00 |
|
|
|
59fe481af9
|
feat: add OpenID Connect prompt Parameter Handling (#1299)
Co-authored-by: Copilot <198982749+Copilot@users.noreply.github.com>
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Co-authored-by: Elias Schneider <login@eliasschneider.com>
|
2026-04-19 18:03:08 +02:00 |
|
|
Elias Schneider
|
5c4d7ff877
|
feat: add auth method claim (amr) to tokens (#1433)
|
2026-04-18 22:31:24 +02:00 |
|
|
Alessandro (Ale) Segala
|
2b94535ade
|
fix: disable callback URLs with protocols "javascript" and "data" (#1397)
|
2026-04-02 17:01:44 -07:00 |
|
|
Ken Watanabe
|
34890235ba
|
Merge commit from fork
|
2026-03-07 16:59:25 +01:00 |
|
|
|
4d22c2dbcf
|
fix: federated client credentials not working if sub ≠ client_id (#1342)
Co-authored-by: Copilot <198982749+Copilot@users.noreply.github.com>
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
|
2026-03-01 18:48:20 +01:00 |
|
|
|
a90c8abe51
|
chore(deps): upgrade to node 24 and go 1.26.0 (#1328)
Co-authored-by: ItalyPaleAle <43508+ItalyPaleAle@users.noreply.github.com>
Co-authored-by: Elias Schneider <login@eliasschneider.com>
|
2026-02-23 19:50:44 +01:00 |
|
|
Elias Schneider
|
2a11c3e609
|
fix: use user specific email verified claim instead of global one
|
2026-01-11 15:46:14 +01:00 |
|
|
Justin MoyandElias Schneider
|
2d7e2ec8df
|
feat: process nonce within device authorization flow (#1185)
Co-authored-by: Elias Schneider <login@eliasschneider.com>
|
2026-01-04 18:18:17 +00:00 |
|
|
Elias Schneider
|
4881130ead
|
refactor: run SCIM jobs in context of gocron instead of custom implementation
|
2026-01-04 19:00:18 +01:00 |
|
|
Elias Schneider
|
579cfdc678
|
feat: add support for SCIM provisioning (#1182)
|
2026-01-02 17:54:20 +01:00 |
|
|
Elias Schneider
|
078152d4db
|
fix!: make wildcard matching in callback URLs more stricter (#1161)
|
2025-12-30 17:01:22 +01:00 |
|
|
Elias Schneider
|
f75cef83d5
|
feat: restrict oidc clients by user groups per default (#1164)
|
2025-12-24 09:09:25 +01:00 |
|
|
Alessandro (Ale) SegalaandElias Schneider
|
29a1d3b778
|
feat: add database storage backend (#1091)
Co-authored-by: Elias Schneider <login@eliasschneider.com>
|
2025-11-16 18:23:46 +01:00 |
|
|
Elias SchneiderandAlessandro Segala
|
bfd71d090c
|
feat: add support for S3 storage backend (#1080)
Co-authored-by: Alessandro (Ale) Segala <43508+ItalyPaleAle@users.noreply.github.com>
|
2025-11-10 09:02:25 +00:00 |
|
|
Kyle MendellandElias Schneider
|
028d1c858e
|
feat: add support for dark mode oidc client icons (#1039)
Co-authored-by: Elias Schneider <login@eliasschneider.com>
|
2025-10-24 09:57:12 +02:00 |
|
|
Alessandro (Ale) Segala
|
eb3963d0fc
|
fix: use constant time comparisons when validating PKCE challenges (#1047)
|
2025-10-24 08:30:50 +02:00 |
|