Commit Graph

567 Commits

Author SHA1 Message Date
Elias Schneider
7a4d0dd275 refactor: standardize API error handling (#1635) 2026-08-02 23:36:06 +02:00
Elias Schneider
598895e7c5 fix: session revoke fails if orphaned session tokens exist 2026-08-02 18:31:15 +02:00
Jean-François Roy
1934efa84c feat: implement OAuth Client ID Metadata Document (#1525) (#1526)
Co-authored-by: Elias Schneider <login@eliasschneider.com>
2026-08-02 15:05:39 +00:00
Elias Schneider
7c55bdf115 feat: make oauth access tokens RFC 9068 compliant 2026-08-02 15:59:21 +02:00
dependabot[bot]
d24a68d24f chore(deps): Bump the "all-dependencies" group with 3 updates across multiple ecosystems (#1639) 2026-07-31 18:04:54 +02:00
Salvatore Catroppa
8815e5968b fix: one-time-access-token CLI fails with "RuntimePSKs is required" (#1637) 2026-07-31 00:09:10 +02:00
Elias Schneider
e35be309a3 fix: decrease QR code login session duration to 5 minutes 2026-07-30 12:34:02 +02:00
Elias Schneider
0c5e0149cd chore(deps): upgrade vulnerable dependencies 2026-07-30 00:43:11 +02:00
Elias Schneider
9e72bc1c70 feat: display country and city on qr code login approval screen 2026-07-30 00:22:31 +02:00
Elias Schneider
0c27f733b9 feat: drop user initiated one time access token login method 2026-07-29 23:49:08 +02:00
Alessandro (Ale) Segala
2ef7c93fee feat: migrate app locks to Francis (#1624)
Co-authored-by: Elias Schneider <login@eliasschneider.com>
Co-authored-by: Kyle Mendell <kmendell@ofkm.us>
2026-07-29 22:15:40 +02:00
Elias Schneider
e1fd1d320f feat: add qr code alternative sign in method (#1594)
Co-authored-by: ItalyPaleAle <43508+ItalyPaleAle@users.noreply.github.com>
2026-07-28 01:30:13 +02:00
Elias Schneider
968f97fa61 fix: fail early if webauthn session invalid 2026-07-28 00:42:41 +02:00
Elias Schneider
ca28ddcb04 fix: race condition in initial admin setup 2026-07-28 00:19:01 +02:00
Daniel Sandoval
96fac69304 Merge commit from fork
Co-authored-by: ChatGPT <chatgpt@openai.com>
2026-07-27 20:38:19 +02:00
Elias Schneider
91d37126fa chore: pin version of fosite fork 2026-07-27 20:37:09 +02:00
Elias Schneider
6bd058ac46 fix: make oidc device code redemption atomic 2026-07-27 20:32:42 +02:00
Elias Schneider
43aaccd5bf refactor: modularize email module and use actor for email verification (#1625) 2026-07-27 20:00:59 +02:00
Elias Schneider
6bd4679bab tests: correctly close filesystems 2026-07-26 23:30:36 +02:00
Elias Schneider
4743d5967a fix: enforce user verification for login assertions 2026-07-26 19:09:12 +02:00
Markus Schanz
9f559788a4 feat: add support for declaritive client secret configuration (#1619) 2026-07-26 16:27:42 +02:00
Alessandro (Ale) Segala
a1b4e1d2b2 feat: migrate one-time and signup tokens to an actor (#1611)
Co-authored-by: Elias Schneider <login@eliasschneider.com>
2026-07-26 15:32:43 +02:00
Markus Schanz
80c7c4aaf1 feat: add declaritive user id configuration (#1622) 2026-07-25 23:43:16 +02:00
Elias Schneider
8563934fd5 refactor: use NewTextHandler instead of NewHandler for tint 2026-07-24 17:27:54 +02:00
dependabot[bot]
c57c27a004 chore(deps): Bump the "all-dependencies" group with 3 updates across multiple ecosystems (#1621)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-24 17:21:42 +02:00
Elias Schneider
f6b02efe45 chore: upgrade vulnerable dependencies 2026-07-22 18:48:07 +02:00
Elias Schneider
e10f66c07a fix: show only accessible clients on "My Apps" page 2026-07-22 18:33:57 +02:00
Elias Schneider
ad06ea6e00 fix: datatype mismatch between postgres and sqlite causes import to fail 2026-07-22 18:13:13 +02:00
Elias Schneider
0983e91169 fix: honor webauthn user verification setting 2026-07-21 14:59:51 +02:00
Alessandro (Ale) Segala
2cfbcb4b67 refactor: use actors for db configuration (#1604)
Co-authored-by: Claude <noreply@anthropic.com>
2026-07-20 08:48:05 +02:00
github-actions[bot]
472fff33ea chore: update AAGUIDs (#1608)
Co-authored-by: stonith404 <58886915+stonith404@users.noreply.github.com>
2026-07-20 08:38:36 +02:00
Alessandro (Ale) Segala
921095f0a2 fix: relax Francis DB usage while HA is still WIP (#1602)
Co-authored-by: Claude <noreply@anthropic.com>
2026-07-18 21:32:27 +02:00
Alessandro (Ale) Segala
b254d969a5 fix: sync group membership for users added at creation time (#1600) 2026-07-17 11:15:00 -07:00
dependabot[bot]
31c416ab2c chore(deps): Bump the "all-dependencies" group with 3 updates across multiple ecosystems (#1599)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-17 13:11:40 -05:00
Elias Schneider
807bd9e037 feat: add support for proxy protocol 2026-07-17 10:37:47 +02:00
Elias Schneider
9714296efb fix: block link-local addresses in SSRF protection 2026-07-13 11:05:24 +02:00
dependabot[bot]
ef9ed8de32 chore(deps): Bump the "all-dependencies" group with 3 updates across multiple ecosystems (#1578)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Elias Schneider <login@eliasschneider.com>
2026-07-13 09:58:41 +02:00
Elias Schneider
187cd8ddcd feat: add support for CIDR and IP address lists in TRUST_PROXY 2026-07-13 09:32:05 +02:00
Elias Schneider
d9ead47d19 fix: allow insecure callback URLs by default until next major release 2026-07-13 09:21:53 +02:00
Alessandro (Ale) Segala
cfda5f693b refactor: manage instance ID in the KV table (#1579) 2026-07-11 16:16:05 +02:00
Marco Scabbiolo
ff8e34cccf fix: postgres migration 20250822 remove public schema references (#1582)
Co-authored-by: Marco <marco.scabbiolo@redb.ee>
2026-07-11 16:11:07 +02:00
Elias Schneider
f62d476c56 chore: upgrade go version 2026-07-10 16:58:27 +02:00
Elias Schneider
da3677f33d docs: fix wrong OpenAPI documentation 2026-07-10 15:44:28 +02:00
Alessandro (Ale) Segala
b2711ced99 fix: /authorize endpoint crashes when list of scopes is empty (#1575) 2026-07-08 17:48:32 -07:00
Sean McKenzie
6734585712 feat: add description field to oidc clients (#1547)
Co-authored-by: Elias Schneider <login@eliasschneider.com>
2026-07-08 13:41:51 +02:00
Elias Schneider
c85a4e63da fix: disable one time access token exchange for disabled users 2026-07-08 12:04:16 +02:00
Elias Schneider
ce7d3a7e1d tests(unit): fix wrong migration name 2026-07-08 11:51:43 +02:00
Elias Schneider
190914fd72 refactor: remove duplicate fosite config properties 2026-07-08 11:01:50 +02:00
Elias Schneider
25dcad757a feat: add support for unencrypted OIDC request parameter 2026-07-08 10:42:05 +02:00
Elias Schneider
c72da58eaf refactor: rename migrations 2026-07-07 17:16:10 +02:00