Claude
dfd2e5a1e5
refactor: consolidate legacy config migration into migration.go
...
Move fromLegacyConfig out of model.go and merge it with LoadLegacyConfig
(formerly legacy_config.go) into a single migration.go file, so the
one-time legacy config migration is kept separate from the app config
model and its business logic.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com >
Claude-Session: https://claude.ai/code/session_01YZ6SoJpmnLggZqactXxrak
2026-07-20 01:04:18 +00:00
Claude
10c0f1d5d7
refactor: gate sign-in notification email with an explicit flag
...
Pass emailLoginNotificationEnabled to CreateNewSignInWithEmail instead of
the whole AppConfigModel, so the sign-in audit business logic no longer
takes the config struct just to read one flag. The caller evaluates the
flag from the config it already loaded.
The background notification email, which is sent in a detached goroutine
after the request completes, now resolves the current config from the app
config service rather than threading the request's snapshot into the
goroutine.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com >
Claude-Session: https://claude.ai/code/session_01YZ6SoJpmnLggZqactXxrak
2026-07-19 23:13:22 +00:00
Claude
0e0187dbc6
refactor: pass app config as explicit argument instead of request context
...
Remove the AppConfigMiddleware that stored an app-config resolver in the
request context and the FromCtx helper that read it back downstream.
Handlers now load the app config from AppConfigService and pass it as an
explicit argument to the service methods that need it, which then forward
it further down the call chain.
The webauthn and usersignup modules gain an AppConfigResolver dependency so
their handlers can load the config the same way. The email SendEmail and
LDAP SyncAll helpers drop their context-based variants in favor of the
explicit-config versions.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com >
Claude-Session: https://claude.ai/code/session_01YZ6SoJpmnLggZqactXxrak
2026-07-19 21:33:10 +00:00
Alessandro (Ale) Segala
3140fb625b
Merge branch 'main' into actors/config
2026-07-19 10:01:47 -07:00
Alessandro (Ale) Segala and Claude
921095f0a2
fix: relax Francis DB usage while HA is still WIP ( #1602 )
...
Co-authored-by: Claude <noreply@anthropic.com >
2026-07-18 21:32:27 +02:00
ItalyPaleAle
0c061d7f3e
Fix E2E (maybe)
2026-07-18 10:04:32 -07:00
ItalyPaleAle
3ecda60f3b
Completed code updates
2026-07-18 09:42:59 -07:00
ItalyPaleAle
1d489ada0d
Merge branch 'main' of https://github.com/pocket-id/pocket-id into actors/config
2026-07-17 19:16:54 -07:00
ItalyPaleAle
63e2446cf5
More WIP
2026-07-17 19:16:51 -07:00
ItalyPaleAle
4caaa079ca
Actor is done
2026-07-17 19:12:51 -07:00
Alessandro (Ale) Segala
b254d969a5
fix: sync group membership for users added at creation time ( #1600 )
2026-07-17 11:15:00 -07:00
ItalyPaleAle
b7c2c562c7
More WIP
2026-07-17 08:58:32 -07:00
ItalyPaleAle
997b879314
Merge branch 'main' of https://github.com/pocket-id/pocket-id into actors/config
2026-07-17 08:19:18 -07:00
Elias Schneider
807bd9e037
feat: add support for proxy protocol
2026-07-17 10:37:47 +02:00
ItalyPaleAle
669834d2d3
More WIP
2026-07-14 08:59:08 -07:00
ItalyPaleAle
2b11164532
More WIP
2026-07-14 08:57:47 -07:00
ItalyPaleAle
1d2f991be5
More WIP
2026-07-13 07:13:00 -07:00
ItalyPaleAle
eac837fc22
Merge branch 'main' of https://github.com/pocket-id/pocket-id into actors/config
2026-07-13 06:22:24 -07:00
Elias Schneider
9714296efb
fix: block link-local addresses in SSRF protection
2026-07-13 11:05:24 +02:00
Elias Schneider
187cd8ddcd
feat: add support for CIDR and IP address lists in TRUST_PROXY
2026-07-13 09:32:05 +02:00
Elias Schneider
d9ead47d19
fix: allow insecure callback URLs by default until next major release
2026-07-13 09:21:53 +02:00
ItalyPaleAle
0f6ff76165
Add Replace and Update funtions to model
2026-07-11 16:00:16 -07:00
ItalyPaleAle
e4d0cbefbe
WIP
2026-07-11 12:19:04 -07:00
Alessandro (Ale) Segala
cfda5f693b
refactor: manage instance ID in the KV table ( #1579 )
2026-07-11 16:16:05 +02:00
Elias Schneider
da3677f33d
docs: fix wrong OpenAPI documentation
2026-07-10 15:44:28 +02:00
Alessandro (Ale) Segala
b2711ced99
fix: /authorize endpoint crashes when list of scopes is empty ( #1575 )
2026-07-08 17:48:32 -07:00
Sean McKenzie and Elias Schneider
6734585712
feat: add description field to oidc clients ( #1547 )
...
Co-authored-by: Elias Schneider <login@eliasschneider.com >
2026-07-08 13:41:51 +02:00
Elias Schneider
c85a4e63da
fix: disable one time access token exchange for disabled users
2026-07-08 12:04:16 +02:00
Elias Schneider
ce7d3a7e1d
tests(unit): fix wrong migration name
2026-07-08 11:51:43 +02:00
Elias Schneider
190914fd72
refactor: remove duplicate fosite config properties
2026-07-08 11:01:50 +02:00
Elias Schneider
25dcad757a
feat: add support for unencrypted OIDC request parameter
2026-07-08 10:42:05 +02:00
Elias Schneider
f3b6ceb876
fix: add missing burst to rate limit
2026-07-07 14:01:26 +02:00
Elias Schneider
fa2d08cb6d
refactor: remove redundant dtos
2026-07-07 11:51:37 +02:00
Elias Schneider
2f55b7cbc3
fix: device authorization resolve resource creating device_code
2026-07-07 11:51:02 +02:00
Elias Schneider
8035a4c8d5
perf: include permissions in api list response
2026-07-07 11:38:59 +02:00
Elias Schneider
7667377c98
refactor: pass transaction to resolveResource
2026-07-07 11:14:19 +02:00
Elias Schneider
5e2cc6f40e
fix: merge requested scopes instead of replacing them
2026-07-07 11:03:06 +02:00
Elias Schneider
e8cb0c831c
fix: re-check api permissions on access token refresh
2026-07-07 10:58:39 +02:00
Elias Schneider
9a94aa0694
refactor: move Pocket ID specific logic from Fosite into Pocket ID repo
2026-07-06 23:34:33 +02:00
Elias Schneider
34e9a6d198
fix: restore behavior that unknown scopes get ignored
2026-07-06 22:42:38 +02:00
Elias Schneider and Alessandro Segala
09d196f7c5
feat: add OAuth APIs with scoped permissions ( #1542 )
...
Co-authored-by: Alessandro (Ale) Segala <43508+ItalyPaleAle@users.noreply.github.com >
2026-07-06 12:25:02 -07:00
Alessandro (Ale) Segala
eefd51cc4d
fix: various bugs in observability / OTel ( #1564 )
2026-07-05 14:14:39 -07:00
Alessandro (Ale) Segala
f68ad42618
chore: use go-kit for sending emails ( #1565 )
2026-07-05 13:10:11 -07:00
9607495ab4
refactor: integrate Francis actor framework for background jobs, cron scheduling, and rate limiting ( #1556 )
...
Co-authored-by: Elias Schneider <login@eliasschneider.com >
Co-authored-by: Claude <noreply@anthropic.com >
2026-07-03 08:36:45 +02:00
Elias Schneider
ecad31cae2
refactor: migrate signup functionality to single usersignup module
2026-06-30 20:53:31 +02:00
Elias Schneider
58fcf7cbe6
refactor: migrate Webauthn functionality to single webauthn module
2026-06-29 14:05:07 +02:00
Elias Schneider
9fce987106
refactor: migrate API key functionality to single apikey module
2026-06-29 12:11:18 +02:00
97bd466f38
feat: prompt admin with PKCE client support hint ( #1499 )
...
Co-authored-by: james <james@goldfish.net >
Co-authored-by: Alessandro (Ale) Segala <43508+ItalyPaleAle@users.noreply.github.com >
Co-authored-by: Elias Schneider <login@eliasschneider.com >
Co-authored-by: Kyle Mendell <kmendell@ofkm.us >
2026-06-28 11:10:30 -07:00
Elias Schneider
d467855870
feat: add ability to skip consent for client
2026-06-26 23:35:26 +02:00
Elias Schneider
16b5c16a66
fix: CSP error with response_mode=form_post
2026-06-26 14:51:56 +02:00
Claude