ItalyPaleAle and Claude Opus 5
cea1267f37
feat: add FRANCIS_HOST to connect to a standalone Francis runtime
...
FRANCIS_HOST decides where the Francis actor runtime lives. When it is
empty or set to "embedded" (the default), Pocket ID starts the runtime inside its own process, backed by its own database.
Any other value is the address, or a comma-separated list of addresses, of a standalone Francis runtime. Pocket ID then connects to it as a remote actor host and starts no embedded runtime.
Note: connecting to a standalone runtime also needs FRANCIS_HOST_PSK or FRANCIS_HOST_JWT, and optionally (but recommended) FRANCIS_CA.
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com >
Claude-Session: https://claude.ai/code/session_01DMgoTZtznSjP4SHTaHbRen
2026-09-15 16:02:05 +00:00
Elias Schneider
1ee34fddea
chore(deps): update vulnerable packages
2026-09-15 15:30:18 +02:00
Elias Schneider
5cbacd81e6
fix: limit JPG and PNG pixels to prevent decompression bomb
2026-09-15 14:51:06 +02:00
4dc3b68b46
chore(deps): Bump the "all-dependencies" group with 2 updates across multiple ecosystems ( #1742 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com >
Co-authored-by: stonith404 <58886915+stonith404@users.noreply.github.com >
2026-09-14 14:19:12 +00:00
github-actions[bot] and stonith404
9bbd34acc7
chore: update AAGUIDs ( #1751 )
...
Co-authored-by: stonith404 <58886915+stonith404@users.noreply.github.com >
2026-09-14 09:37:31 +00:00
Alessandro (Ale) Segala
de2780bbef
fix: serve bundled logo if no custom logo is set ( #1748 )
2026-09-14 11:33:31 +02:00
Alessandro (Ale) Segala
1da2934766
chore: update Francis to rc.6 ( #1745 )
2026-09-12 15:01:11 -05:00
Alessandro (Ale) Segala
7ddc5d690b
fix: trim values loaded from _FILE env vars in AppConfig ( #1741 )
2026-09-07 19:10:54 -05:00
c65b77c980
chore(deps): Bump the "all-dependencies" group with 3 updates across multiple ecosystems ( #1739 )
...
Co-authored-by: Kyle Mendell <kyle@pocket-id.org >
Co-authored-by: Kyle Mendell <kmendell@ofkm.us >
Signed-off-by: dependabot[bot] <support@github.com >
2026-09-07 09:24:16 -05:00
Alessandro (Ale) Segala
33090fa3e1
feat: use HS256 for Pocket ID's own session tokens + fixes ( #1733 )
2026-09-07 15:27:08 +02:00
Alessandro (Ale) Segala
8c76ba0714
chore: update Francis to rc.5 ( #1738 )
2026-09-03 07:22:49 -05:00
dependabot[bot]
deefdd88d9
chore(deps): Bump google.golang.org/grpc from 1.83.0 to 1.83.1 in /backend ( #1736 )
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-09-02 11:30:44 -05:00
Alessandro (Ale) Segala
01cc44246a
chore: upgrade jwx to v4 ( #1730 )
2026-08-31 14:12:35 -07:00
Alessandro (Ale) Segala
fa8aa44706
chore: update Francis to rc.2 ( #1728 )
2026-08-31 05:15:48 -07:00
Alessandro (Ale) Segala and copilot-swe-agent[bot]
7c79a9e14b
feat: add explicit public keys for federated client credentials ( #1702 )
...
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com >
2026-08-28 21:12:15 +00:00
Elias Schneider
f235104aed
chore(deps): update Go to v1.27.0
2026-08-28 23:02:49 +02:00
dependabot[bot] and Elias Schneider
429793f33c
chore(deps): Bump the "all-dependencies" group with 3 updates across multiple ecosystems ( #1725 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Elias Schneider <login@eliasschneider.com >
2026-08-28 21:49:39 +02:00
Elias Schneider
3657012f93
fix: make sorting of strings case insensitive
2026-08-28 21:49:20 +02:00
Kyle Mendell
d75523fed0
feat: list allowed groups when hovering over allowed group count ( #1671 )
2026-08-25 18:30:16 +02:00
Alessandro (Ale) Segala and Elias Schneider
29a6fd6c29
feat: show admin UI warning for SQLite on networked filesystem ( #1713 )
...
Co-authored-by: Elias Schneider <login@eliasschneider.com >
2026-08-24 15:03:31 -07:00
dependabot[bot]
d258d952b1
chore(deps): Bump the "all-dependencies" group with 2 updates across multiple ecosystems ( #1711 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-22 22:15:28 +02:00
Alessandro (Ale) Segala and copilot-swe-agent[bot]
8c095afd78
refactor: migrate SCIM sync to actor + add tests ( #1680 )
...
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com >
2026-08-18 21:54:06 +02:00
Elias Schneider
a487c78550
feat: reduce one time access code length for better UX
2026-08-18 21:31:22 +02:00
Elias Schneider
915a6bcf08
feat: allow admins to auto grant APIs to CIMD clients ( #1692 )
2026-08-18 20:02:14 +02:00
Alessandro (Ale) Segala
be4c395528
refactor: move remaining database cleanup jobs to actors ( #1698 )
2026-08-17 08:38:35 +02:00
github-actions[bot] and stonith404
0e8ae3b1c7
chore: update AAGUIDs ( #1696 )
...
Co-authored-by: stonith404 <58886915+stonith404@users.noreply.github.com >
2026-08-17 08:35:16 +02:00
Elias Schneider
9421d43f8e
fix: ignore trailing slash in resources
2026-08-17 08:34:28 +02:00
Elias Schneider
07580d9f9f
chore(deps): use fix version for github.com/italypaleale/go-kit
2026-08-16 23:24:37 +02:00
dependabot[bot] and Elias Schneider
c7cab3af84
chore(deps): Bump the "all-dependencies" group with 4 updates across multiple ecosystems ( #1693 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Elias Schneider <login@eliasschneider.com >
2026-08-15 01:17:57 +02:00
Alessandro (Ale) Segala
2dc062ac0f
refactor: move API key cleanup job to actor ( #1687 )
2026-08-15 00:39:02 +02:00
Elias Schneider
1bb21c5d73
refactor: move iss param handling to Fosite
2026-08-12 23:25:35 +02:00
46b8d54e15
feat: serve RFC 8414 authorization server metadata ( #1685 )
...
Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com >
Co-authored-by: Elias Schneider <login@eliasschneider.com >
2026-08-12 23:13:05 +02:00
Anthony Clerici
86cf73b86c
docs: add error responses to openapi spec ( #1684 )
2026-08-11 19:26:48 +02:00
Alessandro (Ale) Segala
155a1fcba0
feat: support multiple client secrets per OIDC client ( #1679 )
2026-08-11 00:54:52 +00:00
Elias Schneider
3ca9a55c71
feat: hide apps without launch url on My Apps page
2026-08-10 22:53:35 +02:00
Alessandro (Ale) Segala
84a58cd757
fix: ignore unsupported grant types in client ID metadata documents ( #1682 )
2026-08-10 09:45:34 -07:00
github-actions[bot] and stonith404
e21202e59b
chore: update AAGUIDs ( #1678 )
...
Co-authored-by: stonith404 <58886915+stonith404@users.noreply.github.com >
2026-08-09 23:41:54 -05:00
Alessandro (Ale) Segala
875e7f0848
chore: update Francis to beta 22 ( #1676 )
2026-08-09 15:45:09 +02:00
Elias Schneider
0c9a03e519
feat: add animated logo as default logo
2026-08-08 20:50:37 +02:00
Elias Schneider
9e637d5aec
fix: improve validation of app config variables
2026-08-08 16:37:14 +02:00
Alessandro (Ale) Segala and Kyle Mendell
563c0f93a6
refactor: migrate LDAP sync to an actor ( #1651 )
...
Co-authored-by: Kyle Mendell <kmendell@ofkm.us >
2026-08-07 09:18:30 -07:00
Alessandro (Ale) Segala
f8db1d8a86
chore: update francis to beta 21 ( #1669 )
2026-08-07 15:40:14 +00:00
dependabot[bot]
42626c50e4
chore(deps): Bump the "all-dependencies" group with 3 updates across multiple ecosystems ( #1668 )
2026-08-07 17:22:59 +02:00
Elias Schneider and Alessandro Segala
d6a47243db
feat: add settings for limiting what passkeys can be used ( #1662 )
...
Co-authored-by: Alessandro (Ale) Segala <43508+ItalyPaleAle@users.noreply.github.com >
2026-08-07 11:17:38 +02:00
Copilot and stonith404
448d271c94
refactor: fix formatting ( #1666 )
...
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com >
Co-authored-by: stonith404 <58886915+stonith404@users.noreply.github.com >
2026-08-07 08:26:45 +02:00
Elias Schneider
535e831b20
fix: brotli compression ignored ( #1661 )
2026-08-07 07:16:02 +02:00
Elias Schneider and Alessandro Segala
06ccadfcd0
fix: separate TLS inputs and preserve certificate reloads ( #1653 )
...
Co-authored-by: Alessandro (Ale) Segala <43508+ItalyPaleAle@users.noreply.github.com >
2026-08-07 00:32:08 +00:00
Alessandro (Ale) Segala
1f9cc5e58e
fix: in non-HA mode, increase AlarmLeaseDuration ( #1660 )
2026-08-06 20:16:48 +02:00
Alessandro (Ale) Segala
22e3909c6c
refactor: move GeoLite to its own package ( #1647 )
2026-08-05 22:12:19 +02:00
Alessandro (Ale) Segala
1c9233c236
fix: make OIDC client token lifetimes optional ( #1650 )
2026-08-05 20:11:40 +00:00
