ItalyPaleAle
fadb1a5552
feat: add FRANCIS_HOST to connect to a standalone Francis runtime
...
FRANCIS_HOST decides where the Francis actor runtime lives. When set to "embedded" (the default), Pocket ID starts the runtime inside its own process.
Any other value is the address, or a comma-separated list of addresses, of a standalone Francis runtime. Pocket ID then connects to it as a remote actor host and starts no embedded runtime.
Because when using a remote runtime, it's likewise not possible to enforce a single instance of Pocket ID is running at once, the env vars currently have the `EXPERIMENTAL_` prefix, are **undocumented**, and show a warning if used.
Notes:
- Connecting to a standalone runtime also needs FRANCIS_HOST_PSK or FRANCIS_HOST_JWT_FILE, and optionally (but recommended) FRANCIS_CA.
- When connecting to a remote runtime, exporting Pocket ID data does not include the actor state, which will need to be backed up and restored separately
2026-09-19 23:38:18 -07:00
Alessandro (Ale) Segala
7ddc5d690b
fix: trim values loaded from _FILE env vars in AppConfig ( #1741 )
2026-09-07 19:10:54 -05:00
Alessandro (Ale) Segala and Elias Schneider
29a6fd6c29
feat: show admin UI warning for SQLite on networked filesystem ( #1713 )
...
Co-authored-by: Elias Schneider <login@eliasschneider.com >
2026-08-24 15:03:31 -07:00
Copilot and stonith404
448d271c94
refactor: fix formatting ( #1666 )
...
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com >
Co-authored-by: stonith404 <58886915+stonith404@users.noreply.github.com >
2026-08-07 08:26:45 +02:00
Elias Schneider and Alessandro Segala
06ccadfcd0
fix: separate TLS inputs and preserve certificate reloads ( #1653 )
...
Co-authored-by: Alessandro (Ale) Segala <43508+ItalyPaleAle@users.noreply.github.com >
2026-08-07 00:32:08 +00:00
Alessandro (Ale) Segala
a526206669
feat: add observability to actors ( #1646 )
2026-08-04 12:31:11 -07:00
Elias Schneider
7a4d0dd275
refactor: standardize API error handling ( #1635 )
2026-08-02 23:36:06 +02:00
Jean-François Roy and Elias Schneider
1934efa84c
feat: implement OAuth Client ID Metadata Document ( #1525 ) ( #1526 )
...
Co-authored-by: Elias Schneider <login@eliasschneider.com >
2026-08-02 15:05:39 +00:00
2ef7c93fee
feat: migrate app locks to Francis ( #1624 )
...
Co-authored-by: Elias Schneider <login@eliasschneider.com >
Co-authored-by: Kyle Mendell <kmendell@ofkm.us >
2026-07-29 22:15:40 +02:00
Elias Schneider and ItalyPaleAle
e1fd1d320f
feat: add qr code alternative sign in method ( #1594 )
...
Co-authored-by: ItalyPaleAle <43508+ItalyPaleAle@users.noreply.github.com >
2026-07-28 01:30:13 +02:00
Elias Schneider
968f97fa61
fix: fail early if webauthn session invalid
2026-07-28 00:42:41 +02:00
Alessandro (Ale) Segala and Claude
2cfbcb4b67
refactor: use actors for db configuration ( #1604 )
...
Co-authored-by: Claude <noreply@anthropic.com >
2026-07-20 08:48:05 +02:00
Elias Schneider
807bd9e037
feat: add support for proxy protocol
2026-07-17 10:37:47 +02:00
Elias Schneider
187cd8ddcd
feat: add support for CIDR and IP address lists in TRUST_PROXY
2026-07-13 09:32:05 +02:00
Elias Schneider
d9ead47d19
fix: allow insecure callback URLs by default until next major release
2026-07-13 09:21:53 +02:00
Alessandro (Ale) Segala
eefd51cc4d
fix: various bugs in observability / OTel ( #1564 )
2026-07-05 14:14:39 -07:00
9607495ab4
refactor: integrate Francis actor framework for background jobs, cron scheduling, and rate limiting ( #1556 )
...
Co-authored-by: Elias Schneider <login@eliasschneider.com >
Co-authored-by: Claude <noreply@anthropic.com >
2026-07-03 08:36:45 +02:00
Elias Schneider
9fce987106
refactor: migrate API key functionality to single apikey module
2026-06-29 12:11:18 +02:00
Elias Schneider
519cda0eef
refactor: remove dead code
2026-06-22 21:58:55 +02:00
Elias Schneider
8158452b37
refactor: use fosite for OAuth 2.0 logic ( #1520 )
2026-06-22 18:42:02 +02:00
Thibault NORMAND and Elias Schneider
68a5abdcca
feat(oauth): add support for Pushed Authorization Requests (RFC9126) ( #1404 )
...
Co-authored-by: Elias Schneider <login@eliasschneider.com >
2026-06-02 14:02:12 +02:00
V
dd77bb0f32
feat: add support for systemd socket activation ( #1479 )
2026-05-29 09:18:29 +02:00
Alessandro (Ale) Segala and Elias Schneider
f4706cd6cc
feat: add support for "select_account" prompt ( #1453 )
...
Co-authored-by: Elias Schneider <login@eliasschneider.com >
2026-04-26 17:26:21 +00:00
Alessandro (Ale) Segala
5559077ab4
fix: add _FILE support for S3_SECRET_ACCESS_KEY_FILE env var ( #1452 )
2026-04-22 14:22:42 -07:00
Alessandro (Ale) Segala
2f0338211d
chore: update golangci-lint ( #1440 )
2026-04-21 11:53:06 -05:00
Elias Schneider
444f7ff2b0
feat: return not found. on /setup if already completed
2026-04-19 20:13:19 +02:00
Elias Schneider
a0cb574313
refactor: reduce complexity of ValidateEnvConfig and initRouter
2026-04-19 18:36:34 +02:00
59fe481af9
feat: add OpenID Connect prompt Parameter Handling ( #1299 )
...
Co-authored-by: Copilot <198982749+Copilot@users.noreply.github.com >
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com >
Co-authored-by: Elias Schneider <login@eliasschneider.com >
2026-04-19 18:03:08 +02:00
Ingmar Stein and Alessandro Segala
8f48d10d55
feat: add TLS support for HTTP/2 server ( #1429 )
...
Co-authored-by: Alessandro (Ale) Segala <43508+ItalyPaleAle@users.noreply.github.com >
2026-04-19 14:04:22 +02:00
Chotow
0551502586
feat: add TRUSTED_PLATFORM environment variable for gin ( #1372 )
2026-03-26 12:44:31 -05:00
Alessandro (Ale) Segala
27ca713cd4
fix: one-time-access-token route should get user ID from URL only ( #1358 )
2026-03-03 18:53:36 -08:00
4d22c2dbcf
fix: federated client credentials not working if sub ≠ client_id ( #1342 )
...
Co-authored-by: Copilot <198982749+Copilot@users.noreply.github.com >
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
2026-03-01 18:48:20 +01:00
Elias Schneider
0c41872cd4
fix: disallow API key renewal and creation with API key authentication ( #1334 )
2026-02-23 20:34:25 +01:00
a90c8abe51
chore(deps): upgrade to node 24 and go 1.26.0 ( #1328 )
...
Co-authored-by: ItalyPaleAle <43508+ItalyPaleAle@users.noreply.github.com >
Co-authored-by: Elias Schneider <login@eliasschneider.com >
2026-02-23 19:50:44 +01:00
Kyle Mendell
c62533d388
fix: ENCRYPTION_KEY needed for version and help commands ( #1256 )
2026-01-18 18:04:53 -06:00
Jasper Bernhardt
0978a89fcc
feat: add VERSION_CHECK_DISABLED environment variable ( #1254 )
2026-01-18 17:28:24 -06:00
Elias Schneider
746aa71d67
feat: add static api key env variable ( #1229 )
2026-01-11 15:36:27 +01:00
Elias Schneider
9ca3d33c88
feat: add environment variable to disable built-in rate limiting
2026-01-11 14:26:30 +01:00
Elias Schneider
1e7442f5df
feat: add support for email verification ( #1223 )
2026-01-11 12:31:26 +01:00
Elias Schneider
811e8772b6
feat: add option to renew API key ( #1214 )
2026-01-09 12:08:58 +01:00
Elias Schneider
e60b80632f
chore: preparation for merge into main branch
2025-12-30 17:01:22 +01:00
Kyle Mendell
ba2f0f18f4
feat: remove DbProvider env variable and calculate it dynamically ( #1114 )
2025-12-30 17:01:22 +01:00
Elias Schneider
f0144584af
feat!: drop support for storing JWK on the filesystem ( #1088 )
2025-12-30 17:01:22 +01:00
Jenic Rycr
e358c433f0
feat: allow audit log retention to be controlled by env variable ( #1158 )
2025-12-23 13:50:00 +01:00
Elias Schneider
3eaf36aae7
fix: restrict email one time sign in token to same browser ( #1144 )
2025-12-12 14:51:07 +01:00
Elias Schneider
8d30346f64
refactor: rename file backend value fs to filesystem
2025-11-30 12:56:15 +01:00
Elias Schneider
a3c968758a
feat: add option to disable S3 integrity check
2025-11-25 22:14:44 +01:00
Alessandro (Ale) Segala
a54b867105
refactor: use constants for AppEnv values ( #1098 )
2025-11-16 18:25:06 +01:00
Alessandro (Ale) Segala and Elias Schneider
29a1d3b778
feat: add database storage backend ( #1091 )
...
Co-authored-by: Elias Schneider <login@eliasschneider.com >
2025-11-16 18:23:46 +01:00
Elias Schneider and Alessandro Segala
bfd71d090c
feat: add support for S3 storage backend ( #1080 )
...
Co-authored-by: Alessandro (Ale) Segala <43508+ItalyPaleAle@users.noreply.github.com >
2025-11-10 09:02:25 +00:00
ItalyPaleAle