Claude
7cb2f27cb1
Address review feedback on client secrets
...
Always serialize the "secrets" field in the credentials DTO, as an empty
list when the client has no secrets, and make it a required property in
the frontend type so consumers never have to handle a missing value.
The federated credentials card now hands its callback only the federated
identities it owns, and the page merges them into the client credentials,
so saving them no longer drops the secrets from the local client object.
Also drop the field comments on OidcClientSecret that restated the code,
keeping only the note about the prefix being empty for migrated secrets.
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com >
Claude-Session: https://claude.ai/code/session_01Gcdcb75uaMU5UE1G2niL3L
2026-08-11 00:31:06 +00:00
Claude
018a2280bc
Merge remote-tracking branch 'origin/main' into claude/merge-conflicts-reviewer-comments-ltre0t
...
# Conflicts:
# backend/internal/service/e2etest_service.go
2026-08-11 00:23:55 +00:00
Elias Schneider
03498e2f51
fix: don't show "show hidden apps" if none available
2026-08-10 23:04:44 +02:00
Elias Schneider
3ca9a55c71
feat: hide apps without launch url on My Apps page
2026-08-10 22:53:35 +02:00
Alessandro (Ale) Segala
84a58cd757
fix: ignore unsupported grant types in client ID metadata documents ( #1682 )
2026-08-10 09:45:34 -07:00
Elias Schneider
2f43ce41fe
fix: wrong loading indicator shown on device page
2026-08-10 18:40:12 +02:00
github-actions[bot]
e21202e59b
chore: update AAGUIDs ( #1678 )
...
Co-authored-by: stonith404 <58886915+stonith404@users.noreply.github.com >
2026-08-09 23:41:54 -05:00
ItalyPaleAle
d37190a072
fix e2e tests
2026-08-09 19:45:11 -07:00
ItalyPaleAle
e2ff72fc48
Sort hashes in-memory by created-at
2026-08-09 17:56:57 -07:00
ItalyPaleAle
b1f072463e
Remove deprecated method
2026-08-09 17:55:44 -07:00
ItalyPaleAle
379be0dbbc
feat: support multiple client secrets per OIDC client
...
Fixes #1659
2026-08-09 17:38:53 -07:00
Alessandro (Ale) Segala
875e7f0848
chore: update Francis to beta 22 ( #1676 )
2026-08-09 15:45:09 +02:00
Elias Schneider
0c9a03e519
feat: add animated logo as default logo
2026-08-08 20:50:37 +02:00
Elias Schneider
987d1a8b59
chore: remove unnecessary curl dependency from Dockerfile
2026-08-08 17:37:31 +02:00
Elias Schneider
9e637d5aec
fix: improve validation of app config variables
2026-08-08 16:37:14 +02:00
Elias Schneider
76f6b249f2
docs: change logo image in README.md
2026-08-08 00:38:10 +02:00
Elias Schneider
8afe5a1936
chore(translations): update translations via Crowdin ( #1667 )
2026-08-07 15:02:41 -05:00
Kyle Mendell
981a41cf0a
chore(deps): bump pnpm to v11.20.0 ( #1670 )
2026-08-07 20:26:06 +02:00
Alessandro (Ale) Segala
563c0f93a6
refactor: migrate LDAP sync to an actor ( #1651 )
...
Co-authored-by: Kyle Mendell <kmendell@ofkm.us >
2026-08-07 09:18:30 -07:00
Alessandro (Ale) Segala
f8db1d8a86
chore: update francis to beta 21 ( #1669 )
2026-08-07 15:40:14 +00:00
dependabot[bot]
42626c50e4
chore(deps): Bump the "all-dependencies" group with 3 updates across multiple ecosystems ( #1668 )
2026-08-07 17:22:59 +02:00
Elias Schneider
f39f59e9e0
release: 2.13.0
2026-08-07 11:21:42 +02:00
Elias Schneider
c87012ae01
fix: align last signed in text left
2026-08-07 11:19:48 +02:00
Elias Schneider
d6a47243db
feat: add settings for limiting what passkeys can be used ( #1662 )
...
Co-authored-by: Alessandro (Ale) Segala <43508+ItalyPaleAle@users.noreply.github.com >
2026-08-07 11:17:38 +02:00
Copilot
448d271c94
refactor: fix formatting ( #1666 )
...
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com >
Co-authored-by: stonith404 <58886915+stonith404@users.noreply.github.com >
2026-08-07 08:26:45 +02:00
Elias Schneider
535e831b20
fix: brotli compression ignored ( #1661 )
2026-08-07 07:16:02 +02:00
Elias Schneider
06ccadfcd0
fix: separate TLS inputs and preserve certificate reloads ( #1653 )
...
Co-authored-by: Alessandro (Ale) Segala <43508+ItalyPaleAle@users.noreply.github.com >
2026-08-07 00:32:08 +00:00
Alessandro (Ale) Segala
1f9cc5e58e
fix: in non-HA mode, increase AlarmLeaseDuration ( #1660 )
2026-08-06 20:16:48 +02:00
Alessandro (Ale) Segala
22e3909c6c
refactor: move GeoLite to its own package ( #1647 )
2026-08-05 22:12:19 +02:00
Alessandro (Ale) Segala
1c9233c236
fix: make OIDC client token lifetimes optional ( #1650 )
2026-08-05 20:11:40 +00:00
Elias Schneider
4fe6f0688c
tests: use smaller francis.bin
2026-08-05 22:02:00 +02:00
Elias Schneider
95809dd29c
tests: remove invalid unit test
2026-08-05 22:01:43 +02:00
Alessandro (Ale) Segala
08407ae564
feat: include Francis data in Pocket ID backups ( #1645 )
...
Co-authored-by: Claude <noreply@anthropic.com >
Co-authored-by: Elias Schneider <login@eliasschneider.com >
2026-08-05 19:57:38 +00:00
Elias Schneider
140b5d3cb4
fix: don't skip rate limits for loopback addresses
2026-08-05 21:49:05 +02:00
Elias Schneider
98160b20a1
chore: remove unused curl dependency from Dockerfile
2026-08-05 20:37:57 +02:00
Elias Schneider
9320144991
chore(deps): upgrade vulnerable dependencies
2026-08-04 23:27:13 +02:00
Elias Schneider
488c50ef95
fix: respect log level in HTTP request logs
2026-08-04 23:12:22 +02:00
Alessandro (Ale) Segala
a526206669
feat: add observability to actors ( #1646 )
2026-08-04 12:31:11 -07:00
Elias Schneider
2c7d1b63e1
fix: don't rely on content length header for optional json binding
2026-08-04 21:10:17 +02:00
Elias Schneider
aec376bb54
chore(translations): update translations via Crowdin ( #1642 )
2026-08-04 10:50:18 -05:00
Elias Schneider
5d43c4aaeb
feat: add ability to customize session duration of clients ( #1641 )
2026-08-03 23:23:29 +02:00
Elias Schneider
1238bf0f37
fix: explicitly require JSON for request bodies
2026-08-03 22:58:08 +02:00
Elias Schneider
69d55ada6c
fix: explicitly set SameSite to Lax for cookies
2026-08-03 22:58:01 +02:00
Elias Schneider
e3e0ddc192
chore: add deepsec to gitignore
2026-08-03 20:21:20 +02:00
Elias Schneider
db64b150be
fix: disable api key auth for webauthn register endpoints
2026-08-03 20:20:40 +02:00
Elias Schneider
71b8bf99bc
chore(translations): update translations via Crowdin ( #1632 )
2026-08-03 19:07:36 +02:00
Elias Schneider
7a4d0dd275
refactor: standardize API error handling ( #1635 )
2026-08-02 23:36:06 +02:00
Elias Schneider
281bea54d3
tests(e2e): fix wrong database version in database.json
2026-08-02 18:43:54 +02:00
Elias Schneider
598895e7c5
fix: session revoke fails if orphaned session tokens exist
2026-08-02 18:31:15 +02:00
Jean-François Roy
1934efa84c
feat: implement OAuth Client ID Metadata Document ( #1525 ) ( #1526 )
...
Co-authored-by: Elias Schneider <login@eliasschneider.com >
2026-08-02 15:05:39 +00:00
