Commit Graph
14 Commits
Author SHA1 Message Date
ItalyPaleAle fadb1a5552 feat: add FRANCIS_HOST to connect to a standalone Francis runtime
FRANCIS_HOST decides where the Francis actor runtime lives. When set to "embedded" (the default), Pocket ID starts the runtime inside its own process.

Any other value is the address, or a comma-separated list of addresses, of a standalone Francis runtime. Pocket ID then connects to it as a remote actor host and starts no embedded runtime.

Because when using a remote runtime, it's likewise not possible to enforce a single instance of Pocket ID is running at once, the env vars currently have the `EXPERIMENTAL_` prefix, are **undocumented**, and show a warning if used.

Notes:

- Connecting to a standalone runtime also needs FRANCIS_HOST_PSK or FRANCIS_HOST_JWT_FILE, and optionally (but recommended) FRANCIS_CA.
- When connecting to a remote runtime, exporting Pocket ID data does not include the actor state, which will need to be backed up and restored separately
2026-09-19 23:38:18 -07:00
Mike Beaumont b5a07a29ef feat: include passkey icons based on AAGUID (#1756) 2026-09-19 09:41:53 -07:00
c65b77c980 chore(deps): Bump the "all-dependencies" group with 3 updates across multiple ecosystems (#1739)
Co-authored-by: Kyle Mendell <kyle@pocket-id.org>
Co-authored-by: Kyle Mendell <kmendell@ofkm.us>
Signed-off-by: dependabot[bot] <support@github.com>
2026-09-07 09:24:16 -05:00
Alessandro (Ale) Segala 01cc44246a chore: upgrade jwx to v4 (#1730) 2026-08-31 14:12:35 -07:00
Alessandro (Ale) Segala be4c395528 refactor: move remaining database cleanup jobs to actors (#1698) 2026-08-17 08:38:35 +02:00
Alessandro (Ale) SegalaandKyle Mendell 563c0f93a6 refactor: migrate LDAP sync to an actor (#1651)
Co-authored-by: Kyle Mendell <kmendell@ofkm.us>
2026-08-07 09:18:30 -07:00
Elias SchneiderandAlessandro Segala d6a47243db feat: add settings for limiting what passkeys can be used (#1662)
Co-authored-by: Alessandro (Ale) Segala <43508+ItalyPaleAle@users.noreply.github.com>
2026-08-07 11:17:38 +02:00
Elias Schneider db64b150be fix: disable api key auth for webauthn register endpoints 2026-08-03 20:20:40 +02:00
Elias Schneider 7a4d0dd275 refactor: standardize API error handling (#1635) 2026-08-02 23:36:06 +02:00
Elias Schneider 968f97fa61 fix: fail early if webauthn session invalid 2026-07-28 00:42:41 +02:00
Elias Schneider 4743d5967a fix: enforce user verification for login assertions 2026-07-26 19:09:12 +02:00
Elias Schneider 0983e91169 fix: honor webauthn user verification setting 2026-07-21 14:59:51 +02:00
Alessandro (Ale) SegalaandClaude 2cfbcb4b67 refactor: use actors for db configuration (#1604)
Co-authored-by: Claude <noreply@anthropic.com>
2026-07-20 08:48:05 +02:00
Elias Schneider 58fcf7cbe6 refactor: migrate Webauthn functionality to single webauthn module 2026-06-29 14:05:07 +02:00