ItalyPaleAle and Claude Opus 5
cea1267f37
feat: add FRANCIS_HOST to connect to a standalone Francis runtime
...
FRANCIS_HOST decides where the Francis actor runtime lives. When it is
empty or set to "embedded" (the default), Pocket ID starts the runtime inside its own process, backed by its own database.
Any other value is the address, or a comma-separated list of addresses, of a standalone Francis runtime. Pocket ID then connects to it as a remote actor host and starts no embedded runtime.
Note: connecting to a standalone runtime also needs FRANCIS_HOST_PSK or FRANCIS_HOST_JWT, and optionally (but recommended) FRANCIS_CA.
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com >
Claude-Session: https://claude.ai/code/session_01DMgoTZtznSjP4SHTaHbRen
2026-09-15 16:02:05 +00:00
Alessandro (Ale) Segala and Elias Schneider
29a6fd6c29
feat: show admin UI warning for SQLite on networked filesystem ( #1713 )
...
Co-authored-by: Elias Schneider <login@eliasschneider.com >
2026-08-24 15:03:31 -07:00
Alessandro (Ale) Segala and copilot-swe-agent[bot]
8c095afd78
refactor: migrate SCIM sync to actor + add tests ( #1680 )
...
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com >
2026-08-18 21:54:06 +02:00
Alessandro (Ale) Segala
be4c395528
refactor: move remaining database cleanup jobs to actors ( #1698 )
2026-08-17 08:38:35 +02:00
Alessandro (Ale) Segala
2dc062ac0f
refactor: move API key cleanup job to actor ( #1687 )
2026-08-15 00:39:02 +02:00
Alessandro (Ale) Segala and Kyle Mendell
563c0f93a6
refactor: migrate LDAP sync to an actor ( #1651 )
...
Co-authored-by: Kyle Mendell <kmendell@ofkm.us >
2026-08-07 09:18:30 -07:00
Alessandro (Ale) Segala
22e3909c6c
refactor: move GeoLite to its own package ( #1647 )
2026-08-05 22:12:19 +02:00
Jean-François Roy and Elias Schneider
1934efa84c
feat: implement OAuth Client ID Metadata Document ( #1525 ) ( #1526 )
...
Co-authored-by: Elias Schneider <login@eliasschneider.com >
2026-08-02 15:05:39 +00:00
Elias Schneider
9e72bc1c70
feat: display country and city on qr code login approval screen
2026-07-30 00:22:31 +02:00
2ef7c93fee
feat: migrate app locks to Francis ( #1624 )
...
Co-authored-by: Elias Schneider <login@eliasschneider.com >
Co-authored-by: Kyle Mendell <kmendell@ofkm.us >
2026-07-29 22:15:40 +02:00
Elias Schneider and ItalyPaleAle
e1fd1d320f
feat: add qr code alternative sign in method ( #1594 )
...
Co-authored-by: ItalyPaleAle <43508+ItalyPaleAle@users.noreply.github.com >
2026-07-28 01:30:13 +02:00
Elias Schneider
43aaccd5bf
refactor: modularize email module and use actor for email verification ( #1625 )
2026-07-27 20:00:59 +02:00
Alessandro (Ale) Segala and Elias Schneider
a1b4e1d2b2
feat: migrate one-time and signup tokens to an actor ( #1611 )
...
Co-authored-by: Elias Schneider <login@eliasschneider.com >
2026-07-26 15:32:43 +02:00
Alessandro (Ale) Segala and Claude
2cfbcb4b67
refactor: use actors for db configuration ( #1604 )
...
Co-authored-by: Claude <noreply@anthropic.com >
2026-07-20 08:48:05 +02:00
Elias Schneider
d9ead47d19
fix: allow insecure callback URLs by default until next major release
2026-07-13 09:21:53 +02:00
Alessandro (Ale) Segala
cfda5f693b
refactor: manage instance ID in the KV table ( #1579 )
2026-07-11 16:16:05 +02:00
Elias Schneider and Alessandro Segala
09d196f7c5
feat: add OAuth APIs with scoped permissions ( #1542 )
...
Co-authored-by: Alessandro (Ale) Segala <43508+ItalyPaleAle@users.noreply.github.com >
2026-07-06 12:25:02 -07:00
9607495ab4
refactor: integrate Francis actor framework for background jobs, cron scheduling, and rate limiting ( #1556 )
...
Co-authored-by: Elias Schneider <login@eliasschneider.com >
Co-authored-by: Claude <noreply@anthropic.com >
2026-07-03 08:36:45 +02:00
Elias Schneider
ecad31cae2
refactor: migrate signup functionality to single usersignup module
2026-06-30 20:53:31 +02:00
Elias Schneider
58fcf7cbe6
refactor: migrate Webauthn functionality to single webauthn module
2026-06-29 14:05:07 +02:00
Elias Schneider
9fce987106
refactor: migrate API key functionality to single apikey module
2026-06-29 12:11:18 +02:00
Elias Schneider
8158452b37
refactor: use fosite for OAuth 2.0 logic ( #1520 )
2026-06-22 18:42:02 +02:00
Elias Schneider
746aa71d67
feat: add static api key env variable ( #1229 )
2026-01-11 15:36:27 +01:00
Elias Schneider
1e7442f5df
feat: add support for email verification ( #1223 )
2026-01-11 12:31:26 +01:00
Elias Schneider
2af70d9b4d
feat: add CLI command for encryption key rotation ( #1209 )
2026-01-07 09:34:23 +01:00
Elias Schneider
4881130ead
refactor: run SCIM jobs in context of gocron instead of custom implementation
2026-01-04 19:00:18 +01:00
Elias Schneider
579cfdc678
feat: add support for SCIM provisioning ( #1182 )
2026-01-02 17:54:20 +01:00
3420a00073
feat: add CLI command for importing and exporting Pocket ID data ( #998 )
...
Co-authored-by: Alessandro (Ale) Segala <43508+ItalyPaleAle@users.noreply.github.com >
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
2025-12-30 17:01:22 +01:00
Alessandro (Ale) Segala and Elias Schneider
29a1d3b778
feat: add database storage backend ( #1091 )
...
Co-authored-by: Elias Schneider <login@eliasschneider.com >
2025-11-16 18:23:46 +01:00
Elias Schneider and Alessandro Segala
bfd71d090c
feat: add support for S3 storage backend ( #1080 )
...
Co-authored-by: Alessandro (Ale) Segala <43508+ItalyPaleAle@users.noreply.github.com >
2025-11-10 09:02:25 +00:00
Elias Schneider and Alessandro Segala
ed2c7b2303
feat: add ability to set default profile picture ( #1061 )
...
Co-authored-by: Alessandro (Ale) Segala <43508+ItalyPaleAle@users.noreply.github.com >
2025-11-04 13:40:00 +01:00
Kyle Mendell and Elias Schneider
6bdf5fa37a
feat: support for url based icons ( #840 )
...
Co-authored-by: Elias Schneider <login@eliasschneider.com >
2025-09-29 15:07:55 +00:00
Elias Schneider and Alessandro Segala
a3da943aa6
fix: decouple images from app config service ( #965 )
...
Co-authored-by: Alessandro (Ale) Segala <43508+ItalyPaleAle@users.noreply.github.com >
2025-09-20 21:42:52 +02:00
Elias Schneider and Alessandro Segala
6215e1ac01
feat: add CSP header ( #908 )
...
Co-authored-by: Alessandro (Ale) Segala <43508+ItalyPaleAle@users.noreply.github.com >
2025-09-07 11:45:06 -07:00
182d809028
feat(signup): add default user groups and claims for new users ( #812 )
...
Co-authored-by: Kyle Mendell <kmendell@ofkm.us >
Co-authored-by: Elias Schneider <login@eliasschneider.com >
2025-08-22 14:25:02 +02:00
0cb039d35d
feat: add option to OIDC client to require re-authentication ( #747 )
...
Co-authored-by: Kyle Mendell <kmendell@ofkm.us >
Co-authored-by: Elias Schneider <login@eliasschneider.com >
2025-08-22 08:56:40 +02:00
Alessandro (Ale) Segala
42a861d206
refactor: complete conversion of log calls to slog ( #787 )
2025-07-27 04:34:23 +00:00
Alessandro (Ale) Segala and Kyle Mendell
78266e3e4c
feat: Support OTel and JSON for logs (via log/slog) ( #760 )
...
Co-authored-by: Kyle Mendell <kmendell@ofkm.us >
2025-07-27 01:03:52 +00:00
Alessandro (Ale) Segala and Kyle Mendell
5550729120
feat: encrypt private keys saved on disk and in database ( #682 )
...
Co-authored-by: Kyle Mendell <kmendell@ofkm.us >
2025-07-03 13:34:34 -05:00
05bfe00924
feat: JWT bearer assertions for client authentication ( #566 )
...
Co-authored-by: Kyle Mendell <ksm@ofkm.us >
Co-authored-by: Kyle Mendell <kmendell@ofkm.us >
Co-authored-by: Elias Schneider <login@eliasschneider.com >
2025-06-06 12:23:51 +02:00
Daenney and ItalyPaleAle
6f54ee5d66
feat: OpenTelemetry tracing and metrics ( #262 ) ( #495 )
...
Co-authored-by: ItalyPaleAle <43508+ItalyPaleAle@users.noreply.github.com >
2025-05-05 15:59:44 +02:00
Alessandro (Ale) Segala
bda178c2bb
refactor: complete graceful shutdown implementation and add service runner ( #493 )
2025-05-03 23:25:22 +02:00
