sendnrw/pocket-id
2
0
Fork 0
mirror of https://github.com/pocket-id/pocket-id.git synced 2026-09-21 18:39:05 +02:00
Code Issues Packages Projects Releases Wiki Activity
1,429 Commits 15 Branches 132 Tags
fadb1a555299262cffcfece7e183ee51112c6d55
Commit Graph
633 Commits
Author SHA1 Message Date
ItalyPaleAle fadb1a5552 feat: add FRANCIS_HOST to connect to a standalone Francis runtime 
FRANCIS_HOST decides where the Francis actor runtime lives. When set to "embedded" (the default), Pocket ID starts the runtime inside its own process.

Any other value is the address, or a comma-separated list of addresses, of a standalone Francis runtime. Pocket ID then connects to it as a remote actor host and starts no embedded runtime.

Because when using a remote runtime, it's likewise not possible to enforce a single instance of Pocket ID is running at once, the env vars currently have the `EXPERIMENTAL_` prefix, are **undocumented**, and show a warning if used.

Notes:

- Connecting to a standalone runtime also needs FRANCIS_HOST_PSK or FRANCIS_HOST_JWT_FILE, and optionally (but recommended) FRANCIS_CA.
- When connecting to a remote runtime, exporting Pocket ID data does not include the actor state, which will need to be backed up and restored separately
 2026-09-19 23:38:18 -07:00
Elias Schneider 6060c6e12e chore(deps): update backend dependencies 2026-09-19 20:25:04 +02:00
Elias Schneider 4edfaf622a fix: default profile picture empty if username contains only one char 2026-09-19 19:43:38 +02:00
dependabot[bot] 2eb6c3dcdb chore(deps): Bump go.opentelemetry.io/otel/exporters/zipkin from 1.44.0 to 1.45.0 in /backend (#1765) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-09-19 18:53:24 +02:00
Mike Beaumont b5a07a29ef feat: include passkey icons based on AAGUID (#1756) 2026-09-19 09:41:53 -07:00
dependabot[bot] 818333fb38 chore(deps): Bump the "all-dependencies" group with 2 updates across multiple ecosystems (#1760) 2026-09-18 15:17:43 +00:00
Elias Schneider 2084dffd8d fix: prevent PAR requirement bypass via conflicting request parameters 2026-09-17 21:37:41 +02:00
Elias Schneider 1ee34fddea chore(deps): update vulnerable packages 2026-09-15 15:30:18 +02:00
Elias Schneider 5cbacd81e6 fix: limit JPG and PNG pixels to prevent decompression bomb 2026-09-15 14:51:06 +02:00
dependabot[bot]copilot-swe-agent[bot]stonith404
 		4dc3b68b46 chore(deps): Bump the "all-dependencies" group with 2 updates across multiple ecosystems (#1742) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: stonith404 <58886915+stonith404@users.noreply.github.com>
 2026-09-14 14:19:12 +00:00
github-actions[bot]andstonith404 9bbd34acc7 chore: update AAGUIDs (#1751) 
Co-authored-by: stonith404 <58886915+stonith404@users.noreply.github.com>
 2026-09-14 09:37:31 +00:00
Alessandro (Ale) Segala de2780bbef fix: serve bundled logo if no custom logo is set (#1748) 2026-09-14 11:33:31 +02:00
Alessandro (Ale) Segala 1da2934766 chore: update Francis to rc.6 (#1745) 2026-09-12 15:01:11 -05:00
Alessandro (Ale) Segala 7ddc5d690b fix: trim values loaded from _FILE env vars in AppConfig (#1741) 2026-09-07 19:10:54 -05:00
dependabot[bot]Kyle MendellKyle Mendell
 		c65b77c980 chore(deps): Bump the "all-dependencies" group with 3 updates across multiple ecosystems (#1739) 
Co-authored-by: Kyle Mendell <kyle@pocket-id.org>
Co-authored-by: Kyle Mendell <kmendell@ofkm.us>
Signed-off-by: dependabot[bot] <support@github.com>
 2026-09-07 09:24:16 -05:00
Alessandro (Ale) Segala 33090fa3e1 feat: use HS256 for Pocket ID's own session tokens + fixes (#1733) 2026-09-07 15:27:08 +02:00
Alessandro (Ale) Segala 8c76ba0714 chore: update Francis to rc.5 (#1738) 2026-09-03 07:22:49 -05:00
dependabot[bot] deefdd88d9 chore(deps): Bump google.golang.org/grpc from 1.83.0 to 1.83.1 in /backend (#1736) 
Signed-off-by: dependabot[bot] <support@github.com>
 2026-09-02 11:30:44 -05:00
Alessandro (Ale) Segala 01cc44246a chore: upgrade jwx to v4 (#1730) 2026-08-31 14:12:35 -07:00
Alessandro (Ale) Segala fa8aa44706 chore: update Francis to rc.2 (#1728) 2026-08-31 05:15:48 -07:00
Alessandro (Ale) Segalaandcopilot-swe-agent[bot] 7c79a9e14b feat: add explicit public keys for federated client credentials (#1702) 
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
 2026-08-28 21:12:15 +00:00
Elias Schneider f235104aed chore(deps): update Go to v1.27.0 2026-08-28 23:02:49 +02:00
dependabot[bot]andElias Schneider 429793f33c chore(deps): Bump the "all-dependencies" group with 3 updates across multiple ecosystems (#1725) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Elias Schneider <login@eliasschneider.com>
 2026-08-28 21:49:39 +02:00
Elias Schneider 3657012f93 fix: make sorting of strings case insensitive 2026-08-28 21:49:20 +02:00
Kyle Mendell d75523fed0 feat: list allowed groups when hovering over allowed group count (#1671) 2026-08-25 18:30:16 +02:00
Alessandro (Ale) SegalaandElias Schneider 29a6fd6c29 feat: show admin UI warning for SQLite on networked filesystem (#1713) 
Co-authored-by: Elias Schneider <login@eliasschneider.com>
 2026-08-24 15:03:31 -07:00
dependabot[bot] d258d952b1 chore(deps): Bump the "all-dependencies" group with 2 updates across multiple ecosystems (#1711) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-08-22 22:15:28 +02:00
Alessandro (Ale) Segalaandcopilot-swe-agent[bot] 8c095afd78 refactor: migrate SCIM sync to actor + add tests (#1680) 
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
 2026-08-18 21:54:06 +02:00
Elias Schneider a487c78550 feat: reduce one time access code length for better UX 2026-08-18 21:31:22 +02:00
Elias Schneider 915a6bcf08 feat: allow admins to auto grant APIs to CIMD clients (#1692) 2026-08-18 20:02:14 +02:00
Alessandro (Ale) Segala be4c395528 refactor: move remaining database cleanup jobs to actors (#1698) 2026-08-17 08:38:35 +02:00
github-actions[bot]andstonith404 0e8ae3b1c7 chore: update AAGUIDs (#1696) 
Co-authored-by: stonith404 <58886915+stonith404@users.noreply.github.com>
 2026-08-17 08:35:16 +02:00
Elias Schneider 9421d43f8e fix: ignore trailing slash in resources 2026-08-17 08:34:28 +02:00
Elias Schneider 07580d9f9f chore(deps): use fix version for github.com/italypaleale/go-kit 2026-08-16 23:24:37 +02:00
dependabot[bot]andElias Schneider c7cab3af84 chore(deps): Bump the "all-dependencies" group with 4 updates across multiple ecosystems (#1693) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Elias Schneider <login@eliasschneider.com>
 2026-08-15 01:17:57 +02:00
Alessandro (Ale) Segala 2dc062ac0f refactor: move API key cleanup job to actor (#1687) 2026-08-15 00:39:02 +02:00
Elias Schneider 1bb21c5d73 refactor: move iss param handling to Fosite 2026-08-12 23:25:35 +02:00
Jean-François RoyClaude Opus 5Elias Schneider
 		46b8d54e15 feat: serve RFC 8414 authorization server metadata (#1685) 
Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com>
Co-authored-by: Elias Schneider <login@eliasschneider.com>
 2026-08-12 23:13:05 +02:00
Anthony Clerici 86cf73b86c docs: add error responses to openapi spec (#1684) 2026-08-11 19:26:48 +02:00
Alessandro (Ale) Segala 155a1fcba0 feat: support multiple client secrets per OIDC client (#1679) 2026-08-11 00:54:52 +00:00
Elias Schneider 3ca9a55c71 feat: hide apps without launch url on My Apps page 2026-08-10 22:53:35 +02:00
Alessandro (Ale) Segala 84a58cd757 fix: ignore unsupported grant types in client ID metadata documents (#1682) 2026-08-10 09:45:34 -07:00
github-actions[bot]andstonith404 e21202e59b chore: update AAGUIDs (#1678) 
Co-authored-by: stonith404 <58886915+stonith404@users.noreply.github.com>
 2026-08-09 23:41:54 -05:00
Alessandro (Ale) Segala 875e7f0848 chore: update Francis to beta 22 (#1676) 2026-08-09 15:45:09 +02:00
Elias Schneider 0c9a03e519 feat: add animated logo as default logo 2026-08-08 20:50:37 +02:00
Elias Schneider 9e637d5aec fix: improve validation of app config variables 2026-08-08 16:37:14 +02:00
Alessandro (Ale) SegalaandKyle Mendell 563c0f93a6 refactor: migrate LDAP sync to an actor (#1651) 
Co-authored-by: Kyle Mendell <kmendell@ofkm.us>
 2026-08-07 09:18:30 -07:00
Alessandro (Ale) Segala f8db1d8a86 chore: update francis to beta 21 (#1669) 2026-08-07 15:40:14 +00:00
dependabot[bot] 42626c50e4 chore(deps): Bump the "all-dependencies" group with 3 updates across multiple ecosystems (#1668) 2026-08-07 17:22:59 +02:00
Elias SchneiderandAlessandro Segala d6a47243db feat: add settings for limiting what passkeys can be used (#1662) 
Co-authored-by: Alessandro (Ale) Segala <43508+ItalyPaleAle@users.noreply.github.com>
 2026-08-07 11:17:38 +02:00