ItalyPaleAle and Claude Opus 5
cea1267f37
feat: add FRANCIS_HOST to connect to a standalone Francis runtime
...
FRANCIS_HOST decides where the Francis actor runtime lives. When it is
empty or set to "embedded" (the default), Pocket ID starts the runtime inside its own process, backed by its own database.
Any other value is the address, or a comma-separated list of addresses, of a standalone Francis runtime. Pocket ID then connects to it as a remote actor host and starts no embedded runtime.
Note: connecting to a standalone runtime also needs FRANCIS_HOST_PSK or FRANCIS_HOST_JWT, and optionally (but recommended) FRANCIS_CA.
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com >
Claude-Session: https://claude.ai/code/session_01DMgoTZtznSjP4SHTaHbRen
2026-09-15 16:02:05 +00:00
Elias Schneider
81cb290bed
fix: show more user friendly error page for authorize interaction failures
2026-09-15 16:59:35 +02:00
Alessandro (Ale) Segala
de2780bbef
fix: serve bundled logo if no custom logo is set ( #1748 )
2026-09-14 11:33:31 +02:00
c65b77c980
chore(deps): Bump the "all-dependencies" group with 3 updates across multiple ecosystems ( #1739 )
...
Co-authored-by: Kyle Mendell <kyle@pocket-id.org >
Co-authored-by: Kyle Mendell <kmendell@ofkm.us >
Signed-off-by: dependabot[bot] <support@github.com >
2026-09-07 09:24:16 -05:00
Alessandro (Ale) Segala and copilot-swe-agent[bot]
7c79a9e14b
feat: add explicit public keys for federated client credentials ( #1702 )
...
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com >
2026-08-28 21:12:15 +00:00
Elias Schneider
915a6bcf08
feat: allow admins to auto grant APIs to CIMD clients ( #1692 )
2026-08-18 20:02:14 +02:00
Alessandro (Ale) Segala
6fba970159
tests: fix flaky update application image e2e test ( #1690 )
2026-08-15 00:35:15 +02:00
Alessandro (Ale) Segala
155a1fcba0
feat: support multiple client secrets per OIDC client ( #1679 )
2026-08-11 00:54:52 +00:00
Elias Schneider
3ca9a55c71
feat: hide apps without launch url on My Apps page
2026-08-10 22:53:35 +02:00
Elias Schneider
0c9a03e519
feat: add animated logo as default logo
2026-08-08 20:50:37 +02:00
Elias Schneider and Alessandro Segala
d6a47243db
feat: add settings for limiting what passkeys can be used ( #1662 )
...
Co-authored-by: Alessandro (Ale) Segala <43508+ItalyPaleAle@users.noreply.github.com >
2026-08-07 11:17:38 +02:00
Alessandro (Ale) Segala
1c9233c236
fix: make OIDC client token lifetimes optional ( #1650 )
2026-08-05 20:11:40 +00:00
Elias Schneider
4fe6f0688c
tests: use smaller francis.bin
2026-08-05 22:02:00 +02:00
08407ae564
feat: include Francis data in Pocket ID backups ( #1645 )
...
Co-authored-by: Claude <noreply@anthropic.com >
Co-authored-by: Elias Schneider <login@eliasschneider.com >
2026-08-05 19:57:38 +00:00
Elias Schneider
5d43c4aaeb
feat: add ability to customize session duration of clients ( #1641 )
2026-08-03 23:23:29 +02:00
Elias Schneider
69d55ada6c
fix: explicitly set SameSite to Lax for cookies
2026-08-03 22:58:01 +02:00
Elias Schneider
7a4d0dd275
refactor: standardize API error handling ( #1635 )
2026-08-02 23:36:06 +02:00
Elias Schneider
9e72bc1c70
feat: display country and city on qr code login approval screen
2026-07-30 00:22:31 +02:00
Elias Schneider
0c27f733b9
feat: drop user initiated one time access token login method
2026-07-29 23:49:08 +02:00
Elias Schneider and ItalyPaleAle
e1fd1d320f
feat: add qr code alternative sign in method ( #1594 )
...
Co-authored-by: ItalyPaleAle <43508+ItalyPaleAle@users.noreply.github.com >
2026-07-28 01:30:13 +02:00
Elias Schneider
ca28ddcb04
fix: race condition in initial admin setup
2026-07-28 00:19:01 +02:00
Elias Schneider
ad06ea6e00
fix: datatype mismatch between postgres and sqlite causes import to fail
2026-07-22 18:13:13 +02:00
Elias Schneider
316cf47ceb
fix: INTERNAL_APP_URL not reflected in UI URLs
2026-07-13 10:51:24 +02:00
Elias Schneider
28a553f63b
feat: add tab bar navigation for crowded pages
2026-07-10 15:33:02 +02:00
Alessandro (Ale) Segala
b2711ced99
fix: /authorize endpoint crashes when list of scopes is empty ( #1575 )
2026-07-08 17:48:32 -07:00
Sean McKenzie and Elias Schneider
6734585712
feat: add description field to oidc clients ( #1547 )
...
Co-authored-by: Elias Schneider <login@eliasschneider.com >
2026-07-08 13:41:51 +02:00
Elias Schneider and Alessandro Segala
09d196f7c5
feat: add OAuth APIs with scoped permissions ( #1542 )
...
Co-authored-by: Alessandro (Ale) Segala <43508+ItalyPaleAle@users.noreply.github.com >
2026-07-06 12:25:02 -07:00
Alessandro (Ale) Segala
d359438814
tests(e2e): make API key renewal date picker navigation date-independent ( #1560 )
2026-07-02 21:16:47 -05:00
Elias Schneider
931a6c2adb
feat: drop TOFU support for callback URL
2026-07-02 14:05:37 +02:00
8564d35682
feat: login code input boxes ( #1545 )
...
Co-authored-by: james <james@goldfish.net >
Co-authored-by: Elias Schneider <login@eliasschneider.com >
2026-07-02 07:56:18 +00:00
97bd466f38
feat: prompt admin with PKCE client support hint ( #1499 )
...
Co-authored-by: james <james@goldfish.net >
Co-authored-by: Alessandro (Ale) Segala <43508+ItalyPaleAle@users.noreply.github.com >
Co-authored-by: Elias Schneider <login@eliasschneider.com >
Co-authored-by: Kyle Mendell <kmendell@ofkm.us >
2026-06-28 11:10:30 -07:00
Elias Schneider
d467855870
feat: add ability to skip consent for client
2026-06-26 23:35:26 +02:00
Elias Schneider
16b5c16a66
fix: CSP error with response_mode=form_post
2026-06-26 14:51:56 +02:00
Elias Schneider
2ed703540d
fix: don't reject offline_accessscope
2026-06-26 14:43:22 +02:00
Elias Schneider
7eaaea717b
tests(e2e): fix flaky test
2026-06-22 23:00:10 +02:00
Elias Schneider
8689ddd72b
feat: improve error handling on authorize page
2026-06-22 22:12:14 +02:00
Elias Schneider
8158452b37
refactor: use fosite for OAuth 2.0 logic ( #1520 )
2026-06-22 18:42:02 +02:00
Elias Schneider
dbbe2a403a
tests(e2e): fix locators after shadcn upgrade
2026-06-21 20:52:42 +02:00
Elias Schneider
effd2a146f
tests(e2e): fix wrong assertion
2026-06-16 12:08:38 +02:00
Elias Schneider
8a75774971
fix: callback URL validation not validated if prompt=none
2026-06-16 12:02:57 +02:00
Elias Schneider
3d9d4de619
fix: PAR parameters not respected by authorize page
2026-06-16 09:29:34 +02:00
Thibault NORMAND and Elias Schneider
68a5abdcca
feat(oauth): add support for Pushed Authorization Requests (RFC9126) ( #1404 )
...
Co-authored-by: Elias Schneider <login@eliasschneider.com >
2026-06-02 14:02:12 +02:00
Elias Schneider
9ad2bfc7b3
tests(e2e): don't compare hashes of profile pictures
2026-05-29 13:43:21 +02:00
Elias Schneider
b3d40a476b
feat: improve design trough the whole application
2026-05-29 11:37:34 +02:00
Elias Schneider
f13424720b
tests(e2e): use custom Playwright route for callback URL checks
2026-05-29 09:44:37 +02:00
Elias Schneider
0c95b7c3cc
feat: add support for response_mode=fragment
2026-05-29 09:14:44 +02:00
Elias Schneider
9dd3d319cf
feat: delete OAuth refresh token on RP initiated logout ( #1480 )
2026-05-19 17:05:44 +02:00
Alessandro (Ale) Segala and Elias Schneider
f4706cd6cc
feat: add support for "select_account" prompt ( #1453 )
...
Co-authored-by: Elias Schneider <login@eliasschneider.com >
2026-04-26 17:26:21 +00:00
64d4ac7919
feat: add support for response_mode=form_post ( #1360 )
...
Co-authored-by: Alessandro (Ale) Segala <43508+ItalyPaleAle@users.noreply.github.com >
Co-authored-by: Kyle Mendell <kmendell@ofkm.us >
Co-authored-by: Elias Schneider <login@eliasschneider.com >
2026-04-26 14:11:35 +02:00
Björn F.
a9fdab10f1
fix: improve keyboard navigation and screen-reader labels ( #1445 )
2026-04-21 15:21:23 -05:00
