sendnrw/pocket-id
2
0
Fork 0
mirror of https://github.com/pocket-id/pocket-id.git synced 2026-08-31 08:11:27 +02:00
Code Issues Packages Projects Releases Wiki Activity
1,365 Commits 17 Branches 130 Tags
7cb2f27cb1d93775cd9eb2e93af99ba68ca401d5
Commit Graph

598 Commits

Author SHA1 Message Date
Claude
7cb2f27cb1 Address review feedback on client secrets 
Always serialize the "secrets" field in the credentials DTO, as an empty
list when the client has no secrets, and make it a required property in
the frontend type so consumers never have to handle a missing value.

The federated credentials card now hands its callback only the federated
identities it owns, and the page merges them into the client credentials,
so saving them no longer drops the secrets from the local client object.

Also drop the field comments on OidcClientSecret that restated the code,
keeping only the note about the prefix being empty for migrated secrets.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Gcdcb75uaMU5UE1G2niL3L
 2026-08-11 00:31:06 +00:00
Claude
018a2280bc Merge remote-tracking branch 'origin/main' into claude/merge-conflicts-reviewer-comments-ltre0t 
# Conflicts:
#	backend/internal/service/e2etest_service.go
 2026-08-11 00:23:55 +00:00
Elias Schneider
3ca9a55c71 feat: hide apps without launch url on My Apps page 2026-08-10 22:53:35 +02:00
Alessandro (Ale) Segala
84a58cd757 fix: ignore unsupported grant types in client ID metadata documents (#1682) 2026-08-10 09:45:34 -07:00
github-actions[bot]
e21202e59b chore: update AAGUIDs (#1678) 
Co-authored-by: stonith404 <58886915+stonith404@users.noreply.github.com>
 2026-08-09 23:41:54 -05:00
ItalyPaleAle
e2ff72fc48 Sort hashes in-memory by created-at 2026-08-09 17:56:57 -07:00
ItalyPaleAle
b1f072463e Remove deprecated method 2026-08-09 17:55:44 -07:00
ItalyPaleAle
379be0dbbc feat: support multiple client secrets per OIDC client 
Fixes #1659
 2026-08-09 17:38:53 -07:00
Alessandro (Ale) Segala
875e7f0848 chore: update Francis to beta 22 (#1676) 2026-08-09 15:45:09 +02:00
Elias Schneider
0c9a03e519 feat: add animated logo as default logo 2026-08-08 20:50:37 +02:00
Elias Schneider
9e637d5aec fix: improve validation of app config variables 2026-08-08 16:37:14 +02:00
Alessandro (Ale) Segala
563c0f93a6 refactor: migrate LDAP sync to an actor (#1651) 
Co-authored-by: Kyle Mendell <kmendell@ofkm.us>
 2026-08-07 09:18:30 -07:00
Alessandro (Ale) Segala
f8db1d8a86 chore: update francis to beta 21 (#1669) 2026-08-07 15:40:14 +00:00
dependabot[bot]
42626c50e4 chore(deps): Bump the "all-dependencies" group with 3 updates across multiple ecosystems (#1668) 2026-08-07 17:22:59 +02:00
Elias Schneider
d6a47243db feat: add settings for limiting what passkeys can be used (#1662) 
Co-authored-by: Alessandro (Ale) Segala <43508+ItalyPaleAle@users.noreply.github.com>
 2026-08-07 11:17:38 +02:00
Copilot
448d271c94 refactor: fix formatting (#1666) 
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: stonith404 <58886915+stonith404@users.noreply.github.com>
 2026-08-07 08:26:45 +02:00
Elias Schneider
535e831b20 fix: brotli compression ignored (#1661) 2026-08-07 07:16:02 +02:00
Elias Schneider
06ccadfcd0 fix: separate TLS inputs and preserve certificate reloads (#1653) 
Co-authored-by: Alessandro (Ale) Segala <43508+ItalyPaleAle@users.noreply.github.com>
 2026-08-07 00:32:08 +00:00
Alessandro (Ale) Segala
1f9cc5e58e fix: in non-HA mode, increase AlarmLeaseDuration (#1660) 2026-08-06 20:16:48 +02:00
Alessandro (Ale) Segala
22e3909c6c refactor: move GeoLite to its own package (#1647) 2026-08-05 22:12:19 +02:00
Alessandro (Ale) Segala
1c9233c236 fix: make OIDC client token lifetimes optional (#1650) 2026-08-05 20:11:40 +00:00
Elias Schneider
95809dd29c tests: remove invalid unit test 2026-08-05 22:01:43 +02:00
Alessandro (Ale) Segala
08407ae564 feat: include Francis data in Pocket ID backups (#1645) 
Co-authored-by: Claude <noreply@anthropic.com>
Co-authored-by: Elias Schneider <login@eliasschneider.com>
 2026-08-05 19:57:38 +00:00
Elias Schneider
140b5d3cb4 fix: don't skip rate limits for loopback addresses 2026-08-05 21:49:05 +02:00
Elias Schneider
488c50ef95 fix: respect log level in HTTP request logs 2026-08-04 23:12:22 +02:00
Alessandro (Ale) Segala
a526206669 feat: add observability to actors (#1646) 2026-08-04 12:31:11 -07:00
Elias Schneider
2c7d1b63e1 fix: don't rely on content length header for optional json binding 2026-08-04 21:10:17 +02:00
Elias Schneider
5d43c4aaeb feat: add ability to customize session duration of clients (#1641) 2026-08-03 23:23:29 +02:00
Elias Schneider
1238bf0f37 fix: explicitly require JSON for request bodies 2026-08-03 22:58:08 +02:00
Elias Schneider
69d55ada6c fix: explicitly set SameSite to Lax for cookies 2026-08-03 22:58:01 +02:00
Elias Schneider
db64b150be fix: disable api key auth for webauthn register endpoints 2026-08-03 20:20:40 +02:00
Elias Schneider
7a4d0dd275 refactor: standardize API error handling (#1635) 2026-08-02 23:36:06 +02:00
Elias Schneider
598895e7c5 fix: session revoke fails if orphaned session tokens exist 2026-08-02 18:31:15 +02:00
Jean-François Roy
1934efa84c feat: implement OAuth Client ID Metadata Document (#1525) (#1526) 
Co-authored-by: Elias Schneider <login@eliasschneider.com>
 2026-08-02 15:05:39 +00:00
Elias Schneider
7c55bdf115 feat: make oauth access tokens RFC 9068 compliant 2026-08-02 15:59:21 +02:00
dependabot[bot]
d24a68d24f chore(deps): Bump the "all-dependencies" group with 3 updates across multiple ecosystems (#1639) 2026-07-31 18:04:54 +02:00
Salvatore Catroppa
8815e5968b fix: one-time-access-token CLI fails with "RuntimePSKs is required" (#1637) 2026-07-31 00:09:10 +02:00
Elias Schneider
e35be309a3 fix: decrease QR code login session duration to 5 minutes 2026-07-30 12:34:02 +02:00
Elias Schneider
0c5e0149cd chore(deps): upgrade vulnerable dependencies 2026-07-30 00:43:11 +02:00
Elias Schneider
9e72bc1c70 feat: display country and city on qr code login approval screen 2026-07-30 00:22:31 +02:00
Elias Schneider
0c27f733b9 feat: drop user initiated one time access token login method 2026-07-29 23:49:08 +02:00
Alessandro (Ale) Segala
2ef7c93fee feat: migrate app locks to Francis (#1624) 
Co-authored-by: Elias Schneider <login@eliasschneider.com>
Co-authored-by: Kyle Mendell <kmendell@ofkm.us>
 2026-07-29 22:15:40 +02:00
Elias Schneider
e1fd1d320f feat: add qr code alternative sign in method (#1594) 
Co-authored-by: ItalyPaleAle <43508+ItalyPaleAle@users.noreply.github.com>
 2026-07-28 01:30:13 +02:00
Elias Schneider
968f97fa61 fix: fail early if webauthn session invalid 2026-07-28 00:42:41 +02:00
Elias Schneider
ca28ddcb04 fix: race condition in initial admin setup 2026-07-28 00:19:01 +02:00
Daniel Sandoval
96fac69304 Merge commit from fork 
Co-authored-by: ChatGPT <chatgpt@openai.com>
 2026-07-27 20:38:19 +02:00
Elias Schneider
91d37126fa chore: pin version of fosite fork 2026-07-27 20:37:09 +02:00
Elias Schneider
6bd058ac46 fix: make oidc device code redemption atomic 2026-07-27 20:32:42 +02:00
Elias Schneider
43aaccd5bf refactor: modularize email module and use actor for email verification (#1625) 2026-07-27 20:00:59 +02:00
Elias Schneider
6bd4679bab tests: correctly close filesystems 2026-07-26 23:30:36 +02:00