Elias Schneider
|
e538ea0bf1
|
chore(deps): update vulnerable dependencies
|
2026-06-22 22:37:51 +02:00 |
|
Elias Schneider
|
8689ddd72b
|
feat: improve error handling on authorize page
|
2026-06-22 22:12:14 +02:00 |
|
Elias Schneider
|
519cda0eef
|
refactor: remove dead code
|
2026-06-22 21:58:55 +02:00 |
|
Elias Schneider
|
cf9a31986f
|
chore: wrap last two migrations into transaction
|
2026-06-22 18:44:48 +02:00 |
|
Elias Schneider
|
8158452b37
|
refactor: use fosite for OAuth 2.0 logic (#1520)
|
2026-06-22 18:42:02 +02:00 |
|
James18232
|
2e77d57282
|
fix: login code null submission and login code length check (#1512)
Co-authored-by: james <james@goldfish.net>
Co-authored-by: Kyle Mendell <kmendell@ofkm.us>
|
2026-06-20 20:42:50 +02:00 |
|
dependabot[bot]
|
f673a91a67
|
chore(deps): Bump the "all-dependencies" group with 2 updates across multiple ecosystems (#1528)
Signed-off-by: dependabot[bot] <support@github.com>
|
2026-06-20 09:58:24 -05:00 |
|
dependabot[bot]
|
24c85029b4
|
chore(deps): Bump the "all-dependencies" group with 4 updates across multiple ecosystems (#1523)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2026-06-16 10:17:14 +00:00 |
|
Elias Schneider
|
8a75774971
|
fix: callback URL validation not validated if prompt=none
|
2026-06-16 12:02:57 +02:00 |
|
Elias Schneider
|
3d9d4de619
|
fix: PAR parameters not respected by authorize page
|
2026-06-16 09:29:34 +02:00 |
|
github-actions[bot]
|
212c574a68
|
chore: update AAGUIDs (#1511)
Co-authored-by: stonith404 <58886915+stonith404@users.noreply.github.com>
|
2026-06-08 09:22:50 +02:00 |
|
Elias Schneider
|
4f97cd4188
|
refactor: fix linter issues
|
2026-06-02 14:08:33 +02:00 |
|
Thibault NORMAND
|
68a5abdcca
|
feat(oauth): add support for Pushed Authorization Requests (RFC9126) (#1404)
Co-authored-by: Elias Schneider <login@eliasschneider.com>
|
2026-06-02 14:02:12 +02:00 |
|
Melvin Snijders
|
e88ff03ea2
|
fix: issues with loading new font (#1496)
|
2026-06-01 11:16:55 +02:00 |
|
Elias Schneider
|
7027296632
|
fix: restore cross-platform binary builds
|
2026-05-31 20:04:30 +02:00 |
|
Elias Schneider
|
e046a03364
|
chore: use fixed minor version of Go
|
2026-05-31 19:09:06 +02:00 |
|
Elias Schneider
|
bc4f75c44f
|
refactor: fix linter issues
|
2026-05-29 12:25:06 +02:00 |
|
Elias Schneider
|
a71219637a
|
fix: add support for unix socket mode in healthcheck
|
2026-05-29 12:11:26 +02:00 |
|
Elias Schneider
|
b3d40a476b
|
feat: improve design trough the whole application
|
2026-05-29 11:37:34 +02:00 |
|
V
|
dd77bb0f32
|
feat: add support for systemd socket activation (#1479)
|
2026-05-29 09:18:29 +02:00 |
|
Elias Schneider
|
0c95b7c3cc
|
feat: add support for response_mode=fragment
|
2026-05-29 09:14:44 +02:00 |
|
github-actions[bot]
|
f4a20e3ef9
|
chore: update AAGUIDs (#1487)
Co-authored-by: stonith404 <58886915+stonith404@users.noreply.github.com>
|
2026-05-25 09:20:32 -05:00 |
|
Elias Schneider
|
5db570bf66
|
feat: remove EXIF/XMP metadata from uploaded images (#1477)
|
2026-05-19 20:56:14 -07:00 |
|
Elias Schneider
|
9dd3d319cf
|
feat: delete OAuth refresh token on RP initiated logout (#1480)
|
2026-05-19 17:05:44 +02:00 |
|
Elias Schneider
|
cc9163f577
|
fix: make stream of downloaded logos seekable for S3 checksum calculation
|
2026-05-19 16:28:30 +02:00 |
|
Elias Schneider
|
b27a52a591
|
revert: delete refresh tokens on end-session to prevent reuse after logout (#1458)
This reverts commit 7aacbd0245.
|
2026-05-18 23:36:39 +02:00 |
|
Elias Schneider
|
8ad95b8af1
|
refactor: apply go 1.26.0 syntax updated
|
2026-05-18 23:06:54 +02:00 |
|
Elias Schneider
|
e56dc124ce
|
refactor: remove deprecated http2 package
|
2026-05-18 23:04:08 +02:00 |
|
Elias Schneider
|
91c2ea2a66
|
chore: upgrade dependencies
|
2026-05-18 22:55:00 +02:00 |
|
Elias Schneider
|
ce6bdb9d7e
|
fix: reject unknown PKCE code challenge methods
|
2026-05-18 22:07:20 +02:00 |
|
Elias Schneider
|
8b22fcaaa4
|
fix: add email_verified to reserved claims list
|
2026-05-18 21:08:51 +02:00 |
|
github-actions[bot]
|
4abd1a5124
|
chore: update AAGUIDs (#1476)
Co-authored-by: stonith404 <58886915+stonith404@users.noreply.github.com>
|
2026-05-18 18:16:48 +02:00 |
|
Elias Schneider
|
714b5b3307
|
fix: return 404 status code for .well-known routes if not found
|
2026-05-18 18:15:54 +02:00 |
|
wucm667
|
7aacbd0245
|
fix(oidc): delete refresh tokens on end-session to prevent reuse after logout (#1458)
Co-authored-by: Alessandro (Ale) Segala <43508+ItalyPaleAle@users.noreply.github.com>
Signed-off-by: wucm667 <stevenwucongmin@gmail.com>
|
2026-05-15 21:25:40 +00:00 |
|
mgabor
|
da3489cfa5
|
fix(oidc): fall back to Basic auth when PKCE puts client_id in body (#1466)
Co-authored-by: mgabor3141 <@mgabor3141>
Co-authored-by: Gabor Mezo <git@mgabor.hu>
Co-authored-by: Alessandro (Ale) Segala <43508+ItalyPaleAle@users.noreply.github.com>
|
2026-05-07 23:01:51 -05:00 |
|
Alessandro (Ale) Segala
|
f4706cd6cc
|
feat: add support for "select_account" prompt (#1453)
Co-authored-by: Elias Schneider <login@eliasschneider.com>
|
2026-04-26 17:26:21 +00:00 |
|
Elias Schneider
|
e33a9b8c88
|
chore: post dependency upgrade fixes
|
2026-04-26 15:46:35 +02:00 |
|
Elias Schneider
|
20df033c1f
|
chore: upgrade dependencies
|
2026-04-26 14:41:41 +02:00 |
|
John
|
64d4ac7919
|
feat: add support for response_mode=form_post (#1360)
Co-authored-by: Alessandro (Ale) Segala <43508+ItalyPaleAle@users.noreply.github.com>
Co-authored-by: Kyle Mendell <kmendell@ofkm.us>
Co-authored-by: Elias Schneider <login@eliasschneider.com>
|
2026-04-26 14:11:35 +02:00 |
|
Anthony Clerici
|
0ed2c48591
|
docs: add missing /api prefix to app config swagger routes (#1454)
|
2026-04-25 17:58:41 +02:00 |
|
Alessandro (Ale) Segala
|
5559077ab4
|
fix: add _FILE support for S3_SECRET_ACCESS_KEY_FILE env var (#1452)
|
2026-04-22 14:22:42 -07:00 |
|
Amit
|
c96d591484
|
fix: return correct byte count in HEAD request writer (#1443)
Co-authored-by: Kyle Mendell <kmendell@ofkm.us>
|
2026-04-21 15:03:08 -05:00 |
|
Alessandro (Ale) Segala
|
2f0338211d
|
chore: update golangci-lint (#1440)
|
2026-04-21 11:53:06 -05:00 |
|
Kyle Mendell
|
ce4b89da65
|
chore: ignore webauthn type for swagger generation
|
2026-04-19 16:48:27 -05:00 |
|
Elias Schneider
|
ff26c4273a
|
refactor: pass context to shutdownServer
|
2026-04-19 20:14:20 +02:00 |
|
Elias Schneider
|
444f7ff2b0
|
feat: return not found. on /setup if already completed
|
2026-04-19 20:13:19 +02:00 |
|
Elias Schneider
|
a0cb574313
|
refactor: reduce complexity of ValidateEnvConfig and initRouter
|
2026-04-19 18:36:34 +02:00 |
|
Elias Schneider
|
978ac87def
|
fix: access token renewal bypasses important checks
|
2026-04-19 18:27:44 +02:00 |
|
Robert Jaakke
|
59fe481af9
|
feat: add OpenID Connect prompt Parameter Handling (#1299)
Co-authored-by: Copilot <198982749+Copilot@users.noreply.github.com>
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Co-authored-by: Elias Schneider <login@eliasschneider.com>
|
2026-04-19 18:03:08 +02:00 |
|
Ingmar Stein
|
8f48d10d55
|
feat: add TLS support for HTTP/2 server (#1429)
Co-authored-by: Alessandro (Ale) Segala <43508+ItalyPaleAle@users.noreply.github.com>
|
2026-04-19 14:04:22 +02:00 |
|