ItalyPaleAle and Claude Opus 5
cea1267f37
feat: add FRANCIS_HOST to connect to a standalone Francis runtime
...
FRANCIS_HOST decides where the Francis actor runtime lives. When it is
empty or set to "embedded" (the default), Pocket ID starts the runtime inside its own process, backed by its own database.
Any other value is the address, or a comma-separated list of addresses, of a standalone Francis runtime. Pocket ID then connects to it as a remote actor host and starts no embedded runtime.
Note: connecting to a standalone runtime also needs FRANCIS_HOST_PSK or FRANCIS_HOST_JWT, and optionally (but recommended) FRANCIS_CA.
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com >
Claude-Session: https://claude.ai/code/session_01DMgoTZtznSjP4SHTaHbRen
2026-09-15 16:02:05 +00:00
Alessandro (Ale) Segala
33090fa3e1
feat: use HS256 for Pocket ID's own session tokens + fixes ( #1733 )
2026-09-07 15:27:08 +02:00
Alessandro (Ale) Segala
01cc44246a
chore: upgrade jwx to v4 ( #1730 )
2026-08-31 14:12:35 -07:00
Alessandro (Ale) Segala and copilot-swe-agent[bot]
8c095afd78
refactor: migrate SCIM sync to actor + add tests ( #1680 )
...
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com >
2026-08-18 21:54:06 +02:00
Elias Schneider and Alessandro Segala
06ccadfcd0
fix: separate TLS inputs and preserve certificate reloads ( #1653 )
...
Co-authored-by: Alessandro (Ale) Segala <43508+ItalyPaleAle@users.noreply.github.com >
2026-08-07 00:32:08 +00:00
08407ae564
feat: include Francis data in Pocket ID backups ( #1645 )
...
Co-authored-by: Claude <noreply@anthropic.com >
Co-authored-by: Elias Schneider <login@eliasschneider.com >
2026-08-05 19:57:38 +00:00
Salvatore Catroppa
8815e5968b
fix: one-time-access-token CLI fails with "RuntimePSKs is required" ( #1637 )
2026-07-31 00:09:10 +02:00
2ef7c93fee
feat: migrate app locks to Francis ( #1624 )
...
Co-authored-by: Elias Schneider <login@eliasschneider.com >
Co-authored-by: Kyle Mendell <kmendell@ofkm.us >
2026-07-29 22:15:40 +02:00
Elias Schneider
6bd4679bab
tests: correctly close filesystems
2026-07-26 23:30:36 +02:00
Alessandro (Ale) Segala and Elias Schneider
a1b4e1d2b2
feat: migrate one-time and signup tokens to an actor ( #1611 )
...
Co-authored-by: Elias Schneider <login@eliasschneider.com >
2026-07-26 15:32:43 +02:00
Alessandro (Ale) Segala and Claude
2cfbcb4b67
refactor: use actors for db configuration ( #1604 )
...
Co-authored-by: Claude <noreply@anthropic.com >
2026-07-20 08:48:05 +02:00
Elias Schneider
807bd9e037
feat: add support for proxy protocol
2026-07-17 10:37:47 +02:00
Alessandro (Ale) Segala
cfda5f693b
refactor: manage instance ID in the KV table ( #1579 )
2026-07-11 16:16:05 +02:00
9607495ab4
refactor: integrate Francis actor framework for background jobs, cron scheduling, and rate limiting ( #1556 )
...
Co-authored-by: Elias Schneider <login@eliasschneider.com >
Co-authored-by: Claude <noreply@anthropic.com >
2026-07-03 08:36:45 +02:00
Elias Schneider
bc4f75c44f
refactor: fix linter issues
2026-05-29 12:25:06 +02:00
Elias Schneider
a71219637a
fix: add support for unix socket mode in healthcheck
2026-05-29 12:11:26 +02:00
Alessandro (Ale) Segala
832b7fbff4
fix: better error messages when there's another instance of Pocket ID running ( #1370 )
2026-03-08 15:37:38 +01:00
Elias Schneider
2af70d9b4d
feat: add CLI command for encryption key rotation ( #1209 )
2026-01-07 09:34:23 +01:00
3420a00073
feat: add CLI command for importing and exporting Pocket ID data ( #998 )
...
Co-authored-by: Alessandro (Ale) Segala <43508+ItalyPaleAle@users.noreply.github.com >
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
2025-12-30 17:01:22 +01:00
Elias Schneider
f0144584af
feat!: drop support for storing JWK on the filesystem ( #1088 )
2025-12-30 17:01:22 +01:00
Elias Schneider
3eaf36aae7
fix: restrict email one time sign in token to same browser ( #1144 )
2025-12-12 14:51:07 +01:00
Alessandro (Ale) Segala
7ab0fd3028
fix: for one-time access tokens and signup tokens, pass TTLs instead of absolute expiration date ( #855 )
2025-08-22 08:02:56 +02:00
Elias Schneider
5a031f5d1b
refactor: use reflection to mark file based env variables ( #815 )
2025-08-07 20:41:00 +02:00
Alessandro (Ale) Segala
42a861d206
refactor: complete conversion of log calls to slog ( #787 )
2025-07-27 04:34:23 +00:00
Alessandro (Ale) Segala
1a41b05f60
feat: distroless container additional variant + healthcheck command ( #716 )
2025-07-04 12:26:01 -07:00
Alessandro (Ale) Segala
8c8fc2304d
feat: add "key-rotate" command ( #709 )
2025-07-03 22:23:24 +02:00
Alessandro (Ale) Segala
3896b7bb3b
chore: address linter's complaint in 1.0 branch ( #546 )
2025-05-24 22:55:46 +02:00
Alessandro (Ale) Segala
cb2a9f9f7d
refactor: replace create-one-time-access-token script with in-app functionality ( #540 )
2025-05-24 22:55:46 +02:00
