476 Commits

Author	SHA1	Message	Date
ItalyPaleAle	eeaf77aaf9	feat: include Francis data in Pocket ID backups ... Part of #1549 Data is exported in the portable format Francis uses	2026-08-03 21:39:11 -07:00
Elias Schneider	5d43c4aaeb	feat: add ability to customize session duration of clients (#1641)	2026-08-03 23:23:29 +02:00
Elias Schneider	1238bf0f37	fix: explicitly require JSON for request bodies	2026-08-03 22:58:08 +02:00
Elias Schneider	69d55ada6c	fix: explicitly set SameSite to Lax for cookies	2026-08-03 22:58:01 +02:00
Elias Schneider	db64b150be	fix: disable api key auth for webauthn register endpoints	2026-08-03 20:20:40 +02:00
Elias Schneider	7a4d0dd275	refactor: standardize API error handling (#1635)	2026-08-02 23:36:06 +02:00
Elias Schneider	598895e7c5	fix: session revoke fails if orphaned session tokens exist	2026-08-02 18:31:15 +02:00
Jean-François Roy	1934efa84c	feat: implement OAuth Client ID Metadata Document (#1525) (#1526) ... Co-authored-by: Elias Schneider <login@eliasschneider.com>	2026-08-02 15:05:39 +00:00
Elias Schneider	7c55bdf115	feat: make oauth access tokens RFC 9068 compliant	2026-08-02 15:59:21 +02:00
Salvatore Catroppa	8815e5968b	fix: one-time-access-token CLI fails with "RuntimePSKs is required" (#1637)	2026-07-31 00:09:10 +02:00
Elias Schneider	e35be309a3	fix: decrease QR code login session duration to 5 minutes	2026-07-30 12:34:02 +02:00
Elias Schneider	9e72bc1c70	feat: display country and city on qr code login approval screen	2026-07-30 00:22:31 +02:00
Elias Schneider	0c27f733b9	feat: drop user initiated one time access token login method	2026-07-29 23:49:08 +02:00
Alessandro (Ale) Segala	2ef7c93fee	feat: migrate app locks to Francis (#1624) ... Co-authored-by: Elias Schneider <login@eliasschneider.com> Co-authored-by: Kyle Mendell <kmendell@ofkm.us>	2026-07-29 22:15:40 +02:00
Elias Schneider	e1fd1d320f	feat: add qr code alternative sign in method (#1594) ... Co-authored-by: ItalyPaleAle <43508+ItalyPaleAle@users.noreply.github.com>	2026-07-28 01:30:13 +02:00
Elias Schneider	968f97fa61	fix: fail early if webauthn session invalid	2026-07-28 00:42:41 +02:00
Elias Schneider	ca28ddcb04	fix: race condition in initial admin setup	2026-07-28 00:19:01 +02:00
Daniel Sandoval	96fac69304	Merge commit from fork ... Co-authored-by: ChatGPT <chatgpt@openai.com>	2026-07-27 20:38:19 +02:00
Elias Schneider	6bd058ac46	fix: make oidc device code redemption atomic	2026-07-27 20:32:42 +02:00
Elias Schneider	43aaccd5bf	refactor: modularize email module and use actor for email verification (#1625)	2026-07-27 20:00:59 +02:00
Elias Schneider	6bd4679bab	tests: correctly close filesystems	2026-07-26 23:30:36 +02:00
Elias Schneider	4743d5967a	fix: enforce user verification for login assertions	2026-07-26 19:09:12 +02:00
Markus Schanz	9f559788a4	feat: add support for declaritive client secret configuration (#1619)	2026-07-26 16:27:42 +02:00
Alessandro (Ale) Segala	a1b4e1d2b2	feat: migrate one-time and signup tokens to an actor (#1611) ... Co-authored-by: Elias Schneider <login@eliasschneider.com>	2026-07-26 15:32:43 +02:00
Markus Schanz	80c7c4aaf1	feat: add declaritive user id configuration (#1622)	2026-07-25 23:43:16 +02:00
Elias Schneider	8563934fd5	refactor: use NewTextHandler instead of NewHandler for tint	2026-07-24 17:27:54 +02:00
Elias Schneider	e10f66c07a	fix: show only accessible clients on "My Apps" page	2026-07-22 18:33:57 +02:00
Elias Schneider	ad06ea6e00	fix: datatype mismatch between postgres and sqlite causes import to fail	2026-07-22 18:13:13 +02:00
Elias Schneider	0983e91169	fix: honor webauthn user verification setting	2026-07-21 14:59:51 +02:00
Alessandro (Ale) Segala	2cfbcb4b67	refactor: use actors for db configuration (#1604) ... Co-authored-by: Claude <noreply@anthropic.com>	2026-07-20 08:48:05 +02:00
Alessandro (Ale) Segala	921095f0a2	fix: relax Francis DB usage while HA is still WIP (#1602) ... Co-authored-by: Claude <noreply@anthropic.com>	2026-07-18 21:32:27 +02:00
Alessandro (Ale) Segala	b254d969a5	fix: sync group membership for users added at creation time (#1600)	2026-07-17 11:15:00 -07:00
Elias Schneider	807bd9e037	feat: add support for proxy protocol	2026-07-17 10:37:47 +02:00
Elias Schneider	9714296efb	fix: block link-local addresses in SSRF protection	2026-07-13 11:05:24 +02:00
Elias Schneider	187cd8ddcd	feat: add support for CIDR and IP address lists in TRUST_PROXY	2026-07-13 09:32:05 +02:00
Elias Schneider	d9ead47d19	fix: allow insecure callback URLs by default until next major release	2026-07-13 09:21:53 +02:00
Alessandro (Ale) Segala	cfda5f693b	refactor: manage instance ID in the KV table (#1579)	2026-07-11 16:16:05 +02:00
Elias Schneider	da3677f33d	docs: fix wrong OpenAPI documentation	2026-07-10 15:44:28 +02:00
Alessandro (Ale) Segala	b2711ced99	fix: /authorize endpoint crashes when list of scopes is empty (#1575)	2026-07-08 17:48:32 -07:00
Sean McKenzie	6734585712	feat: add description field to oidc clients (#1547) ... Co-authored-by: Elias Schneider <login@eliasschneider.com>	2026-07-08 13:41:51 +02:00
Elias Schneider	c85a4e63da	fix: disable one time access token exchange for disabled users	2026-07-08 12:04:16 +02:00
Elias Schneider	ce7d3a7e1d	tests(unit): fix wrong migration name	2026-07-08 11:51:43 +02:00
Elias Schneider	190914fd72	refactor: remove duplicate fosite config properties	2026-07-08 11:01:50 +02:00
Elias Schneider	25dcad757a	feat: add support for unencrypted OIDC request parameter	2026-07-08 10:42:05 +02:00
Elias Schneider	f3b6ceb876	fix: add missing burst to rate limit	2026-07-07 14:01:26 +02:00
Elias Schneider	fa2d08cb6d	refactor: remove redundant dtos	2026-07-07 11:51:37 +02:00
Elias Schneider	2f55b7cbc3	fix: device authorization resolve resource creating device_code	2026-07-07 11:51:02 +02:00
Elias Schneider	8035a4c8d5	perf: include permissions in api list response	2026-07-07 11:38:59 +02:00
Elias Schneider	7667377c98	refactor: pass transaction to resolveResource	2026-07-07 11:14:19 +02:00
Elias Schneider	5e2cc6f40e	fix: merge requested scopes instead of replacing them	2026-07-07 11:03:06 +02:00