ItalyPaleAle
fadb1a5552
feat: add FRANCIS_HOST to connect to a standalone Francis runtime
...
FRANCIS_HOST decides where the Francis actor runtime lives. When set to "embedded" (the default), Pocket ID starts the runtime inside its own process.
Any other value is the address, or a comma-separated list of addresses, of a standalone Francis runtime. Pocket ID then connects to it as a remote actor host and starts no embedded runtime.
Because when using a remote runtime, it's likewise not possible to enforce a single instance of Pocket ID is running at once, the env vars currently have the `EXPERIMENTAL_` prefix, are **undocumented**, and show a warning if used.
Notes:
- Connecting to a standalone runtime also needs FRANCIS_HOST_PSK or FRANCIS_HOST_JWT_FILE, and optionally (but recommended) FRANCIS_CA.
- When connecting to a remote runtime, exporting Pocket ID data does not include the actor state, which will need to be backed up and restored separately
2026-09-19 23:38:18 -07:00
Alessandro (Ale) Segala and Elias Schneider
29a6fd6c29
feat: show admin UI warning for SQLite on networked filesystem ( #1713 )
...
Co-authored-by: Elias Schneider <login@eliasschneider.com >
2026-08-24 15:03:31 -07:00
Alessandro (Ale) Segala and copilot-swe-agent[bot]
8c095afd78
refactor: migrate SCIM sync to actor + add tests ( #1680 )
...
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com >
2026-08-18 21:54:06 +02:00
Alessandro (Ale) Segala
be4c395528
refactor: move remaining database cleanup jobs to actors ( #1698 )
2026-08-17 08:38:35 +02:00
Alessandro (Ale) Segala
2dc062ac0f
refactor: move API key cleanup job to actor ( #1687 )
2026-08-15 00:39:02 +02:00
Alessandro (Ale) Segala and Kyle Mendell
563c0f93a6
refactor: migrate LDAP sync to an actor ( #1651 )
...
Co-authored-by: Kyle Mendell <kmendell@ofkm.us >
2026-08-07 09:18:30 -07:00
Alessandro (Ale) Segala
22e3909c6c
refactor: move GeoLite to its own package ( #1647 )
2026-08-05 22:12:19 +02:00
Jean-François Roy and Elias Schneider
1934efa84c
feat: implement OAuth Client ID Metadata Document ( #1525 ) ( #1526 )
...
Co-authored-by: Elias Schneider <login@eliasschneider.com >
2026-08-02 15:05:39 +00:00
Elias Schneider
9e72bc1c70
feat: display country and city on qr code login approval screen
2026-07-30 00:22:31 +02:00
2ef7c93fee
feat: migrate app locks to Francis ( #1624 )
...
Co-authored-by: Elias Schneider <login@eliasschneider.com >
Co-authored-by: Kyle Mendell <kmendell@ofkm.us >
2026-07-29 22:15:40 +02:00
Elias Schneider and ItalyPaleAle
e1fd1d320f
feat: add qr code alternative sign in method ( #1594 )
...
Co-authored-by: ItalyPaleAle <43508+ItalyPaleAle@users.noreply.github.com >
2026-07-28 01:30:13 +02:00
Elias Schneider
43aaccd5bf
refactor: modularize email module and use actor for email verification ( #1625 )
2026-07-27 20:00:59 +02:00
Alessandro (Ale) Segala and Elias Schneider
a1b4e1d2b2
feat: migrate one-time and signup tokens to an actor ( #1611 )
...
Co-authored-by: Elias Schneider <login@eliasschneider.com >
2026-07-26 15:32:43 +02:00
Alessandro (Ale) Segala and Claude
2cfbcb4b67
refactor: use actors for db configuration ( #1604 )
...
Co-authored-by: Claude <noreply@anthropic.com >
2026-07-20 08:48:05 +02:00
Elias Schneider
d9ead47d19
fix: allow insecure callback URLs by default until next major release
2026-07-13 09:21:53 +02:00
Alessandro (Ale) Segala
cfda5f693b
refactor: manage instance ID in the KV table ( #1579 )
2026-07-11 16:16:05 +02:00
Elias Schneider and Alessandro Segala
09d196f7c5
feat: add OAuth APIs with scoped permissions ( #1542 )
...
Co-authored-by: Alessandro (Ale) Segala <43508+ItalyPaleAle@users.noreply.github.com >
2026-07-06 12:25:02 -07:00
9607495ab4
refactor: integrate Francis actor framework for background jobs, cron scheduling, and rate limiting ( #1556 )
...
Co-authored-by: Elias Schneider <login@eliasschneider.com >
Co-authored-by: Claude <noreply@anthropic.com >
2026-07-03 08:36:45 +02:00
Elias Schneider
ecad31cae2
refactor: migrate signup functionality to single usersignup module
2026-06-30 20:53:31 +02:00
Elias Schneider
58fcf7cbe6
refactor: migrate Webauthn functionality to single webauthn module
2026-06-29 14:05:07 +02:00
Elias Schneider
9fce987106
refactor: migrate API key functionality to single apikey module
2026-06-29 12:11:18 +02:00
Elias Schneider
8158452b37
refactor: use fosite for OAuth 2.0 logic ( #1520 )
2026-06-22 18:42:02 +02:00
Elias Schneider
746aa71d67
feat: add static api key env variable ( #1229 )
2026-01-11 15:36:27 +01:00
Elias Schneider
1e7442f5df
feat: add support for email verification ( #1223 )
2026-01-11 12:31:26 +01:00
Elias Schneider
2af70d9b4d
feat: add CLI command for encryption key rotation ( #1209 )
2026-01-07 09:34:23 +01:00
Elias Schneider
4881130ead
refactor: run SCIM jobs in context of gocron instead of custom implementation
2026-01-04 19:00:18 +01:00
Elias Schneider
579cfdc678
feat: add support for SCIM provisioning ( #1182 )
2026-01-02 17:54:20 +01:00
3420a00073
feat: add CLI command for importing and exporting Pocket ID data ( #998 )
...
Co-authored-by: Alessandro (Ale) Segala <43508+ItalyPaleAle@users.noreply.github.com >
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
2025-12-30 17:01:22 +01:00
Alessandro (Ale) Segala and Elias Schneider
29a1d3b778
feat: add database storage backend ( #1091 )
...
Co-authored-by: Elias Schneider <login@eliasschneider.com >
2025-11-16 18:23:46 +01:00
Elias Schneider and Alessandro Segala
bfd71d090c
feat: add support for S3 storage backend ( #1080 )
...
Co-authored-by: Alessandro (Ale) Segala <43508+ItalyPaleAle@users.noreply.github.com >
2025-11-10 09:02:25 +00:00
Elias Schneider and Alessandro Segala
ed2c7b2303
feat: add ability to set default profile picture ( #1061 )
...
Co-authored-by: Alessandro (Ale) Segala <43508+ItalyPaleAle@users.noreply.github.com >
2025-11-04 13:40:00 +01:00
Kyle Mendell and Elias Schneider
6bdf5fa37a
feat: support for url based icons ( #840 )
...
Co-authored-by: Elias Schneider <login@eliasschneider.com >
2025-09-29 15:07:55 +00:00
Elias Schneider and Alessandro Segala
a3da943aa6
fix: decouple images from app config service ( #965 )
...
Co-authored-by: Alessandro (Ale) Segala <43508+ItalyPaleAle@users.noreply.github.com >
2025-09-20 21:42:52 +02:00
Elias Schneider and Alessandro Segala
6215e1ac01
feat: add CSP header ( #908 )
...
Co-authored-by: Alessandro (Ale) Segala <43508+ItalyPaleAle@users.noreply.github.com >
2025-09-07 11:45:06 -07:00
182d809028
feat(signup): add default user groups and claims for new users ( #812 )
...
Co-authored-by: Kyle Mendell <kmendell@ofkm.us >
Co-authored-by: Elias Schneider <login@eliasschneider.com >
2025-08-22 14:25:02 +02:00
0cb039d35d
feat: add option to OIDC client to require re-authentication ( #747 )
...
Co-authored-by: Kyle Mendell <kmendell@ofkm.us >
Co-authored-by: Elias Schneider <login@eliasschneider.com >
2025-08-22 08:56:40 +02:00
Alessandro (Ale) Segala
42a861d206
refactor: complete conversion of log calls to slog ( #787 )
2025-07-27 04:34:23 +00:00
Alessandro (Ale) Segala and Kyle Mendell
78266e3e4c
feat: Support OTel and JSON for logs (via log/slog) ( #760 )
...
Co-authored-by: Kyle Mendell <kmendell@ofkm.us >
2025-07-27 01:03:52 +00:00
Alessandro (Ale) Segala and Kyle Mendell
5550729120
feat: encrypt private keys saved on disk and in database ( #682 )
...
Co-authored-by: Kyle Mendell <kmendell@ofkm.us >
2025-07-03 13:34:34 -05:00
05bfe00924
feat: JWT bearer assertions for client authentication ( #566 )
...
Co-authored-by: Kyle Mendell <ksm@ofkm.us >
Co-authored-by: Kyle Mendell <kmendell@ofkm.us >
Co-authored-by: Elias Schneider <login@eliasschneider.com >
2025-06-06 12:23:51 +02:00
Daenney and ItalyPaleAle
6f54ee5d66
feat: OpenTelemetry tracing and metrics ( #262 ) ( #495 )
...
Co-authored-by: ItalyPaleAle <43508+ItalyPaleAle@users.noreply.github.com >
2025-05-05 15:59:44 +02:00
Alessandro (Ale) Segala
bda178c2bb
refactor: complete graceful shutdown implementation and add service runner ( #493 )
2025-05-03 23:25:22 +02:00
