sendnrw/pocket-id
2
0
Fork 0
mirror of https://github.com/pocket-id/pocket-id.git synced 2026-07-21 20:21:26 +02:00
Code Issues Packages Projects Releases Wiki Activity
1,289 Commits 12 Branches 127 Tags
dfd2e5a1e57ea5c16923e142f7652d0e2f67df56
Commit Graph

554 Commits

Author SHA1 Message Date
Claude
dfd2e5a1e5 refactor: consolidate legacy config migration into migration.go 
Move fromLegacyConfig out of model.go and merge it with LoadLegacyConfig
(formerly legacy_config.go) into a single migration.go file, so the
one-time legacy config migration is kept separate from the app config
model and its business logic.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01YZ6SoJpmnLggZqactXxrak
 2026-07-20 01:04:18 +00:00
Claude
10c0f1d5d7 refactor: gate sign-in notification email with an explicit flag 
Pass emailLoginNotificationEnabled to CreateNewSignInWithEmail instead of
the whole AppConfigModel, so the sign-in audit business logic no longer
takes the config struct just to read one flag. The caller evaluates the
flag from the config it already loaded.

The background notification email, which is sent in a detached goroutine
after the request completes, now resolves the current config from the app
config service rather than threading the request's snapshot into the
goroutine.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01YZ6SoJpmnLggZqactXxrak
 2026-07-19 23:13:22 +00:00
Claude
0e0187dbc6 refactor: pass app config as explicit argument instead of request context 
Remove the AppConfigMiddleware that stored an app-config resolver in the
request context and the FromCtx helper that read it back downstream.
Handlers now load the app config from AppConfigService and pass it as an
explicit argument to the service methods that need it, which then forward
it further down the call chain.

The webauthn and usersignup modules gain an AppConfigResolver dependency so
their handlers can load the config the same way. The email SendEmail and
LDAP SyncAll helpers drop their context-based variants in favor of the
explicit-config versions.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01YZ6SoJpmnLggZqactXxrak
 2026-07-19 21:33:10 +00:00
Alessandro (Ale) Segala
3140fb625b Merge branch 'main' into actors/config 2026-07-19 10:01:47 -07:00
Alessandro (Ale) Segala
921095f0a2 fix: relax Francis DB usage while HA is still WIP (#1602) 
Co-authored-by: Claude <noreply@anthropic.com>
 2026-07-18 21:32:27 +02:00
ItalyPaleAle
0c061d7f3e Fix E2E (maybe) 2026-07-18 10:04:32 -07:00
ItalyPaleAle
f3499a3de2 Remove module replacement 2026-07-18 09:55:54 -07:00
ItalyPaleAle
3ecda60f3b Completed code updates 2026-07-18 09:42:59 -07:00
ItalyPaleAle
1d489ada0d Merge branch 'main' of https://github.com/pocket-id/pocket-id into actors/config 2026-07-17 19:16:54 -07:00
ItalyPaleAle
63e2446cf5 More WIP 2026-07-17 19:16:51 -07:00
ItalyPaleAle
4caaa079ca Actor is done 2026-07-17 19:12:51 -07:00
Alessandro (Ale) Segala
b254d969a5 fix: sync group membership for users added at creation time (#1600) 2026-07-17 11:15:00 -07:00
dependabot[bot]
31c416ab2c chore(deps): Bump the "all-dependencies" group with 3 updates across multiple ecosystems (#1599) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-07-17 13:11:40 -05:00
ItalyPaleAle
b7c2c562c7 More WIP 2026-07-17 08:58:32 -07:00
ItalyPaleAle
997b879314 Merge branch 'main' of https://github.com/pocket-id/pocket-id into actors/config 2026-07-17 08:19:18 -07:00
Elias Schneider
807bd9e037 feat: add support for proxy protocol 2026-07-17 10:37:47 +02:00
ItalyPaleAle
669834d2d3 More WIP 2026-07-14 08:59:08 -07:00
ItalyPaleAle
2b11164532 More WIP 2026-07-14 08:57:47 -07:00
ItalyPaleAle
1d2f991be5 More WIP 2026-07-13 07:13:00 -07:00
ItalyPaleAle
eac837fc22 Merge branch 'main' of https://github.com/pocket-id/pocket-id into actors/config 2026-07-13 06:22:24 -07:00
Elias Schneider
9714296efb fix: block link-local addresses in SSRF protection 2026-07-13 11:05:24 +02:00
dependabot[bot]
ef9ed8de32 chore(deps): Bump the "all-dependencies" group with 3 updates across multiple ecosystems (#1578) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Elias Schneider <login@eliasschneider.com>
 2026-07-13 09:58:41 +02:00
Elias Schneider
187cd8ddcd feat: add support for CIDR and IP address lists in TRUST_PROXY 2026-07-13 09:32:05 +02:00
Elias Schneider
d9ead47d19 fix: allow insecure callback URLs by default until next major release 2026-07-13 09:21:53 +02:00
ItalyPaleAle
0f6ff76165 Add Replace and Update funtions to model 2026-07-11 16:00:16 -07:00
ItalyPaleAle
e4d0cbefbe WIP 2026-07-11 12:19:04 -07:00
Alessandro (Ale) Segala
cfda5f693b refactor: manage instance ID in the KV table (#1579) 2026-07-11 16:16:05 +02:00
Marco Scabbiolo
ff8e34cccf fix: postgres migration 20250822 remove public schema references (#1582) 
Co-authored-by: Marco <marco.scabbiolo@redb.ee>
 2026-07-11 16:11:07 +02:00
Elias Schneider
f62d476c56 chore: upgrade go version 2026-07-10 16:58:27 +02:00
Elias Schneider
da3677f33d docs: fix wrong OpenAPI documentation 2026-07-10 15:44:28 +02:00
Alessandro (Ale) Segala
b2711ced99 fix: /authorize endpoint crashes when list of scopes is empty (#1575) 2026-07-08 17:48:32 -07:00
Sean McKenzie
6734585712 feat: add description field to oidc clients (#1547) 
Co-authored-by: Elias Schneider <login@eliasschneider.com>
 2026-07-08 13:41:51 +02:00
Elias Schneider
c85a4e63da fix: disable one time access token exchange for disabled users 2026-07-08 12:04:16 +02:00
Elias Schneider
ce7d3a7e1d tests(unit): fix wrong migration name 2026-07-08 11:51:43 +02:00
Elias Schneider
190914fd72 refactor: remove duplicate fosite config properties 2026-07-08 11:01:50 +02:00
Elias Schneider
25dcad757a feat: add support for unencrypted OIDC request parameter 2026-07-08 10:42:05 +02:00
Elias Schneider
c72da58eaf refactor: rename migrations 2026-07-07 17:16:10 +02:00
Elias Schneider
f3b6ceb876 fix: add missing burst to rate limit 2026-07-07 14:01:26 +02:00
Elias Schneider
fa2d08cb6d refactor: remove redundant dtos 2026-07-07 11:51:37 +02:00
Elias Schneider
2f55b7cbc3 fix: device authorization resolve resource creating device_code 2026-07-07 11:51:02 +02:00
Elias Schneider
8035a4c8d5 perf: include permissions in api list response 2026-07-07 11:38:59 +02:00
Elias Schneider
7667377c98 refactor: pass transaction to resolveResource 2026-07-07 11:14:19 +02:00
Elias Schneider
5e2cc6f40e fix: merge requested scopes instead of replacing them 2026-07-07 11:03:06 +02:00
Elias Schneider
e8cb0c831c fix: re-check api permissions on access token refresh 2026-07-07 10:58:39 +02:00
Elias Schneider
337fc6fd1e chore: update Fosite version 2026-07-06 23:43:09 +02:00
Elias Schneider
9a94aa0694 refactor: move Pocket ID specific logic from Fosite into Pocket ID repo 2026-07-06 23:34:33 +02:00
Elias Schneider
34e9a6d198 fix: restore behavior that unknown scopes get ignored 2026-07-06 22:42:38 +02:00
Elias Schneider
09d196f7c5 feat: add OAuth APIs with scoped permissions (#1542) 
Co-authored-by: Alessandro (Ale) Segala <43508+ItalyPaleAle@users.noreply.github.com>
 2026-07-06 12:25:02 -07:00
github-actions[bot]
0b2706a488 chore: update AAGUIDs (#1567) 
Co-authored-by: stonith404 <58886915+stonith404@users.noreply.github.com>
 2026-07-06 08:58:44 +02:00
Alessandro (Ale) Segala
eefd51cc4d fix: various bugs in observability / OTel (#1564) 2026-07-05 14:14:39 -07:00