ItalyPaleAle and Claude Opus 5
cea1267f37
feat: add FRANCIS_HOST to connect to a standalone Francis runtime
...
FRANCIS_HOST decides where the Francis actor runtime lives. When it is
empty or set to "embedded" (the default), Pocket ID starts the runtime inside its own process, backed by its own database.
Any other value is the address, or a comma-separated list of addresses, of a standalone Francis runtime. Pocket ID then connects to it as a remote actor host and starts no embedded runtime.
Note: connecting to a standalone runtime also needs FRANCIS_HOST_PSK or FRANCIS_HOST_JWT, and optionally (but recommended) FRANCIS_CA.
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com >
Claude-Session: https://claude.ai/code/session_01DMgoTZtznSjP4SHTaHbRen
2026-09-15 16:02:05 +00:00
Elias Schneider
81cb290bed
fix: show more user friendly error page for authorize interaction failures
2026-09-15 16:59:35 +02:00
Elias Schneider
d2c2cdaa5d
chore: upgrade alpine packages on image build
2026-09-15 15:47:45 +02:00
Elias Schneider
1ee34fddea
chore(deps): update vulnerable packages
2026-09-15 15:30:18 +02:00
Elias Schneider
5cbacd81e6
fix: limit JPG and PNG pixels to prevent decompression bomb
2026-09-15 14:51:06 +02:00
Elias Schneider
fd99a6b742
fix: add missing await to catch redirect invalid URL errors
2026-09-14 21:11:54 +02:00
4dc3b68b46
chore(deps): Bump the "all-dependencies" group with 2 updates across multiple ecosystems ( #1742 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com >
Co-authored-by: stonith404 <58886915+stonith404@users.noreply.github.com >
2026-09-14 14:19:12 +00:00
github-actions[bot] and stonith404
9bbd34acc7
chore: update AAGUIDs ( #1751 )
...
Co-authored-by: stonith404 <58886915+stonith404@users.noreply.github.com >
2026-09-14 09:37:31 +00:00
Alessandro (Ale) Segala
de2780bbef
fix: serve bundled logo if no custom logo is set ( #1748 )
2026-09-14 11:33:31 +02:00
dependabot[bot]
41eb35b8a7
chore(deps): Bump adm-zip from 0.6.0 to 0.6.1 ( #1747 )
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-09-13 11:35:48 -05:00
Alessandro (Ale) Segala
1da2934766
chore: update Francis to rc.6 ( #1745 )
2026-09-12 15:01:11 -05:00
Alessandro (Ale) Segala
7ddc5d690b
fix: trim values loaded from _FILE env vars in AppConfig ( #1741 )
2026-09-07 19:10:54 -05:00
c65b77c980
chore(deps): Bump the "all-dependencies" group with 3 updates across multiple ecosystems ( #1739 )
...
Co-authored-by: Kyle Mendell <kyle@pocket-id.org >
Co-authored-by: Kyle Mendell <kmendell@ofkm.us >
Signed-off-by: dependabot[bot] <support@github.com >
2026-09-07 09:24:16 -05:00
Elias Schneider
f91fb76eba
chore(translations): update translations via Crowdin ( #1724 )
2026-09-07 08:47:44 -05:00
Alessandro (Ale) Segala
33090fa3e1
feat: use HS256 for Pocket ID's own session tokens + fixes ( #1733 )
2026-09-07 15:27:08 +02:00
Alessandro (Ale) Segala
8c76ba0714
chore: update Francis to rc.5 ( #1738 )
2026-09-03 07:22:49 -05:00
dependabot[bot]
deefdd88d9
chore(deps): Bump google.golang.org/grpc from 1.83.0 to 1.83.1 in /backend ( #1736 )
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-09-02 11:30:44 -05:00
Alessandro (Ale) Segala
01cc44246a
chore: upgrade jwx to v4 ( #1730 )
2026-08-31 14:12:35 -07:00
Alessandro (Ale) Segala
fa8aa44706
chore: update Francis to rc.2 ( #1728 )
2026-08-31 05:15:48 -07:00
Alessandro (Ale) Segala and copilot-swe-agent[bot]
7c79a9e14b
feat: add explicit public keys for federated client credentials ( #1702 )
...
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com >
2026-08-28 21:12:15 +00:00
Elias Schneider
6ff9a5ba7e
ci/cd: update golangci-lint version
2026-08-28 23:05:52 +02:00
Elias Schneider
f235104aed
chore(deps): update Go to v1.27.0
2026-08-28 23:02:49 +02:00
dependabot[bot] and Elias Schneider
429793f33c
chore(deps): Bump the "all-dependencies" group with 3 updates across multiple ecosystems ( #1725 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Elias Schneider <login@eliasschneider.com >
2026-08-28 21:49:39 +02:00
Elias Schneider
3657012f93
fix: make sorting of strings case insensitive
2026-08-28 21:49:20 +02:00
Elias Schneider
2abdf44320
chore(translations): update translations via Crowdin ( #1723 )
2026-08-26 23:20:02 +02:00
Elias Schneider
dd2fc67c87
chore(translations): add Hungarian language files
2026-08-26 23:15:00 +02:00
Elias Schneider
059d45d50e
fix: show long login code button regardless where the user is coming from
2026-08-25 18:54:40 +02:00
Kyle Mendell
d75523fed0
feat: list allowed groups when hovering over allowed group count ( #1671 )
2026-08-25 18:30:16 +02:00
Alessandro (Ale) Segala and Elias Schneider
29a6fd6c29
feat: show admin UI warning for SQLite on networked filesystem ( #1713 )
...
Co-authored-by: Elias Schneider <login@eliasschneider.com >
2026-08-24 15:03:31 -07:00
dependabot[bot]
d258d952b1
chore(deps): Bump the "all-dependencies" group with 2 updates across multiple ecosystems ( #1711 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-22 22:15:28 +02:00
tw-
0bf0f3922d
fix(i18n): Update de.json Translation ( #1705 )
2026-08-20 16:37:11 +02:00
Elias Schneider
5521266227
release: 2.14.0
2026-08-18 22:07:53 +02:00
Alessandro (Ale) Segala and copilot-swe-agent[bot]
8c095afd78
refactor: migrate SCIM sync to actor + add tests ( #1680 )
...
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com >
2026-08-18 21:54:06 +02:00
Elias Schneider
a099d9457c
chore(translations): update translations via Crowdin ( #1703 )
2026-08-18 21:38:29 +02:00
Elias Schneider
a487c78550
feat: reduce one time access code length for better UX
2026-08-18 21:31:22 +02:00
Elias Schneider
900346a1c3
fix: remove unnecessary information from oidc client details
2026-08-18 21:30:01 +02:00
Elias Schneider
6a441b1f9b
feat: improve tooltip design
2026-08-18 21:29:02 +02:00
Elias Schneider
915a6bcf08
feat: allow admins to auto grant APIs to CIMD clients ( #1692 )
2026-08-18 20:02:14 +02:00
tw-
22354581df
fix(i18n): update de.json Translation ( #1699 )
2026-08-17 14:25:28 +02:00
Alessandro (Ale) Segala
be4c395528
refactor: move remaining database cleanup jobs to actors ( #1698 )
2026-08-17 08:38:35 +02:00
github-actions[bot] and stonith404
0e8ae3b1c7
chore: update AAGUIDs ( #1696 )
...
Co-authored-by: stonith404 <58886915+stonith404@users.noreply.github.com >
2026-08-17 08:35:16 +02:00
Elias Schneider
9421d43f8e
fix: ignore trailing slash in resources
2026-08-17 08:34:28 +02:00
Elias Schneider
07580d9f9f
chore(deps): use fix version for github.com/italypaleale/go-kit
2026-08-16 23:24:37 +02:00
dependabot[bot] and Elias Schneider
c7cab3af84
chore(deps): Bump the "all-dependencies" group with 4 updates across multiple ecosystems ( #1693 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Elias Schneider <login@eliasschneider.com >
2026-08-15 01:17:57 +02:00
Elias Schneider
b7232a0a4a
chore(translations): update translations via Crowdin ( #1674 )
2026-08-15 00:39:36 +02:00
Alessandro (Ale) Segala
2dc062ac0f
refactor: move API key cleanup job to actor ( #1687 )
2026-08-15 00:39:02 +02:00
Alessandro (Ale) Segala
6fba970159
tests: fix flaky update application image e2e test ( #1690 )
2026-08-15 00:35:15 +02:00
Elias Schneider
1bb21c5d73
refactor: move iss param handling to Fosite
2026-08-12 23:25:35 +02:00
46b8d54e15
feat: serve RFC 8414 authorization server metadata ( #1685 )
...
Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com >
Co-authored-by: Elias Schneider <login@eliasschneider.com >
2026-08-12 23:13:05 +02:00
Anthony Clerici
86cf73b86c
docs: add error responses to openapi spec ( #1684 )
2026-08-11 19:26:48 +02:00
