ItalyPaleAle and Claude Opus 5
cea1267f37
feat: add FRANCIS_HOST to connect to a standalone Francis runtime
...
FRANCIS_HOST decides where the Francis actor runtime lives. When it is
empty or set to "embedded" (the default), Pocket ID starts the runtime inside its own process, backed by its own database.
Any other value is the address, or a comma-separated list of addresses, of a standalone Francis runtime. Pocket ID then connects to it as a remote actor host and starts no embedded runtime.
Note: connecting to a standalone runtime also needs FRANCIS_HOST_PSK or FRANCIS_HOST_JWT, and optionally (but recommended) FRANCIS_CA.
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com >
Claude-Session: https://claude.ai/code/session_01DMgoTZtznSjP4SHTaHbRen
2026-09-15 16:02:05 +00:00
Alessandro (Ale) Segala
7ddc5d690b
fix: trim values loaded from _FILE env vars in AppConfig ( #1741 )
2026-09-07 19:10:54 -05:00
Alessandro (Ale) Segala and Elias Schneider
29a6fd6c29
feat: show admin UI warning for SQLite on networked filesystem ( #1713 )
...
Co-authored-by: Elias Schneider <login@eliasschneider.com >
2026-08-24 15:03:31 -07:00
Copilot and stonith404
448d271c94
refactor: fix formatting ( #1666 )
...
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com >
Co-authored-by: stonith404 <58886915+stonith404@users.noreply.github.com >
2026-08-07 08:26:45 +02:00
Elias Schneider and Alessandro Segala
06ccadfcd0
fix: separate TLS inputs and preserve certificate reloads ( #1653 )
...
Co-authored-by: Alessandro (Ale) Segala <43508+ItalyPaleAle@users.noreply.github.com >
2026-08-07 00:32:08 +00:00
Alessandro (Ale) Segala
a526206669
feat: add observability to actors ( #1646 )
2026-08-04 12:31:11 -07:00
Elias Schneider
7a4d0dd275
refactor: standardize API error handling ( #1635 )
2026-08-02 23:36:06 +02:00
Jean-François Roy and Elias Schneider
1934efa84c
feat: implement OAuth Client ID Metadata Document ( #1525 ) ( #1526 )
...
Co-authored-by: Elias Schneider <login@eliasschneider.com >
2026-08-02 15:05:39 +00:00
2ef7c93fee
feat: migrate app locks to Francis ( #1624 )
...
Co-authored-by: Elias Schneider <login@eliasschneider.com >
Co-authored-by: Kyle Mendell <kmendell@ofkm.us >
2026-07-29 22:15:40 +02:00
Elias Schneider and ItalyPaleAle
e1fd1d320f
feat: add qr code alternative sign in method ( #1594 )
...
Co-authored-by: ItalyPaleAle <43508+ItalyPaleAle@users.noreply.github.com >
2026-07-28 01:30:13 +02:00
Elias Schneider
968f97fa61
fix: fail early if webauthn session invalid
2026-07-28 00:42:41 +02:00
Alessandro (Ale) Segala and Claude
2cfbcb4b67
refactor: use actors for db configuration ( #1604 )
...
Co-authored-by: Claude <noreply@anthropic.com >
2026-07-20 08:48:05 +02:00
Elias Schneider
807bd9e037
feat: add support for proxy protocol
2026-07-17 10:37:47 +02:00
Elias Schneider
187cd8ddcd
feat: add support for CIDR and IP address lists in TRUST_PROXY
2026-07-13 09:32:05 +02:00
Elias Schneider
d9ead47d19
fix: allow insecure callback URLs by default until next major release
2026-07-13 09:21:53 +02:00
Alessandro (Ale) Segala
eefd51cc4d
fix: various bugs in observability / OTel ( #1564 )
2026-07-05 14:14:39 -07:00
9607495ab4
refactor: integrate Francis actor framework for background jobs, cron scheduling, and rate limiting ( #1556 )
...
Co-authored-by: Elias Schneider <login@eliasschneider.com >
Co-authored-by: Claude <noreply@anthropic.com >
2026-07-03 08:36:45 +02:00
Elias Schneider
9fce987106
refactor: migrate API key functionality to single apikey module
2026-06-29 12:11:18 +02:00
Elias Schneider
519cda0eef
refactor: remove dead code
2026-06-22 21:58:55 +02:00
Elias Schneider
8158452b37
refactor: use fosite for OAuth 2.0 logic ( #1520 )
2026-06-22 18:42:02 +02:00
Thibault NORMAND and Elias Schneider
68a5abdcca
feat(oauth): add support for Pushed Authorization Requests (RFC9126) ( #1404 )
...
Co-authored-by: Elias Schneider <login@eliasschneider.com >
2026-06-02 14:02:12 +02:00
V
dd77bb0f32
feat: add support for systemd socket activation ( #1479 )
2026-05-29 09:18:29 +02:00
Alessandro (Ale) Segala and Elias Schneider
f4706cd6cc
feat: add support for "select_account" prompt ( #1453 )
...
Co-authored-by: Elias Schneider <login@eliasschneider.com >
2026-04-26 17:26:21 +00:00
Alessandro (Ale) Segala
5559077ab4
fix: add _FILE support for S3_SECRET_ACCESS_KEY_FILE env var ( #1452 )
2026-04-22 14:22:42 -07:00
Alessandro (Ale) Segala
2f0338211d
chore: update golangci-lint ( #1440 )
2026-04-21 11:53:06 -05:00
Elias Schneider
444f7ff2b0
feat: return not found. on /setup if already completed
2026-04-19 20:13:19 +02:00
Elias Schneider
a0cb574313
refactor: reduce complexity of ValidateEnvConfig and initRouter
2026-04-19 18:36:34 +02:00
59fe481af9
feat: add OpenID Connect prompt Parameter Handling ( #1299 )
...
Co-authored-by: Copilot <198982749+Copilot@users.noreply.github.com >
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com >
Co-authored-by: Elias Schneider <login@eliasschneider.com >
2026-04-19 18:03:08 +02:00
Ingmar Stein and Alessandro Segala
8f48d10d55
feat: add TLS support for HTTP/2 server ( #1429 )
...
Co-authored-by: Alessandro (Ale) Segala <43508+ItalyPaleAle@users.noreply.github.com >
2026-04-19 14:04:22 +02:00
Chotow
0551502586
feat: add TRUSTED_PLATFORM environment variable for gin ( #1372 )
2026-03-26 12:44:31 -05:00
Alessandro (Ale) Segala
27ca713cd4
fix: one-time-access-token route should get user ID from URL only ( #1358 )
2026-03-03 18:53:36 -08:00
4d22c2dbcf
fix: federated client credentials not working if sub ≠ client_id ( #1342 )
...
Co-authored-by: Copilot <198982749+Copilot@users.noreply.github.com >
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
2026-03-01 18:48:20 +01:00
Elias Schneider
0c41872cd4
fix: disallow API key renewal and creation with API key authentication ( #1334 )
2026-02-23 20:34:25 +01:00
a90c8abe51
chore(deps): upgrade to node 24 and go 1.26.0 ( #1328 )
...
Co-authored-by: ItalyPaleAle <43508+ItalyPaleAle@users.noreply.github.com >
Co-authored-by: Elias Schneider <login@eliasschneider.com >
2026-02-23 19:50:44 +01:00
Kyle Mendell
c62533d388
fix: ENCRYPTION_KEY needed for version and help commands ( #1256 )
2026-01-18 18:04:53 -06:00
Jasper Bernhardt
0978a89fcc
feat: add VERSION_CHECK_DISABLED environment variable ( #1254 )
2026-01-18 17:28:24 -06:00
Elias Schneider
746aa71d67
feat: add static api key env variable ( #1229 )
2026-01-11 15:36:27 +01:00
Elias Schneider
9ca3d33c88
feat: add environment variable to disable built-in rate limiting
2026-01-11 14:26:30 +01:00
Elias Schneider
1e7442f5df
feat: add support for email verification ( #1223 )
2026-01-11 12:31:26 +01:00
Elias Schneider
811e8772b6
feat: add option to renew API key ( #1214 )
2026-01-09 12:08:58 +01:00
Elias Schneider
e60b80632f
chore: preparation for merge into main branch
2025-12-30 17:01:22 +01:00
Kyle Mendell
ba2f0f18f4
feat: remove DbProvider env variable and calculate it dynamically ( #1114 )
2025-12-30 17:01:22 +01:00
Elias Schneider
f0144584af
feat!: drop support for storing JWK on the filesystem ( #1088 )
2025-12-30 17:01:22 +01:00
Jenic Rycr
e358c433f0
feat: allow audit log retention to be controlled by env variable ( #1158 )
2025-12-23 13:50:00 +01:00
Elias Schneider
3eaf36aae7
fix: restrict email one time sign in token to same browser ( #1144 )
2025-12-12 14:51:07 +01:00
Elias Schneider
8d30346f64
refactor: rename file backend value fs to filesystem
2025-11-30 12:56:15 +01:00
Elias Schneider
a3c968758a
feat: add option to disable S3 integrity check
2025-11-25 22:14:44 +01:00
Alessandro (Ale) Segala
a54b867105
refactor: use constants for AppEnv values ( #1098 )
2025-11-16 18:25:06 +01:00
Alessandro (Ale) Segala and Elias Schneider
29a1d3b778
feat: add database storage backend ( #1091 )
...
Co-authored-by: Elias Schneider <login@eliasschneider.com >
2025-11-16 18:23:46 +01:00
Elias Schneider and Alessandro Segala
bfd71d090c
feat: add support for S3 storage backend ( #1080 )
...
Co-authored-by: Alessandro (Ale) Segala <43508+ItalyPaleAle@users.noreply.github.com >
2025-11-10 09:02:25 +00:00
