ItalyPaleAle
fadb1a5552
feat: add FRANCIS_HOST to connect to a standalone Francis runtime
...
FRANCIS_HOST decides where the Francis actor runtime lives. When set to "embedded" (the default), Pocket ID starts the runtime inside its own process.
Any other value is the address, or a comma-separated list of addresses, of a standalone Francis runtime. Pocket ID then connects to it as a remote actor host and starts no embedded runtime.
Because when using a remote runtime, it's likewise not possible to enforce a single instance of Pocket ID is running at once, the env vars currently have the `EXPERIMENTAL_` prefix, are **undocumented**, and show a warning if used.
Notes:
- Connecting to a standalone runtime also needs FRANCIS_HOST_PSK or FRANCIS_HOST_JWT_FILE, and optionally (but recommended) FRANCIS_CA.
- When connecting to a remote runtime, exporting Pocket ID data does not include the actor state, which will need to be backed up and restored separately
2026-09-19 23:38:18 -07:00
Alessandro (Ale) Segala
33090fa3e1
feat: use HS256 for Pocket ID's own session tokens + fixes ( #1733 )
2026-09-07 15:27:08 +02:00
Alessandro (Ale) Segala
01cc44246a
chore: upgrade jwx to v4 ( #1730 )
2026-08-31 14:12:35 -07:00
Alessandro (Ale) Segala and copilot-swe-agent[bot]
8c095afd78
refactor: migrate SCIM sync to actor + add tests ( #1680 )
...
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com >
2026-08-18 21:54:06 +02:00
Elias Schneider and Alessandro Segala
06ccadfcd0
fix: separate TLS inputs and preserve certificate reloads ( #1653 )
...
Co-authored-by: Alessandro (Ale) Segala <43508+ItalyPaleAle@users.noreply.github.com >
2026-08-07 00:32:08 +00:00
08407ae564
feat: include Francis data in Pocket ID backups ( #1645 )
...
Co-authored-by: Claude <noreply@anthropic.com >
Co-authored-by: Elias Schneider <login@eliasschneider.com >
2026-08-05 19:57:38 +00:00
Salvatore Catroppa
8815e5968b
fix: one-time-access-token CLI fails with "RuntimePSKs is required" ( #1637 )
2026-07-31 00:09:10 +02:00
2ef7c93fee
feat: migrate app locks to Francis ( #1624 )
...
Co-authored-by: Elias Schneider <login@eliasschneider.com >
Co-authored-by: Kyle Mendell <kmendell@ofkm.us >
2026-07-29 22:15:40 +02:00
Elias Schneider
6bd4679bab
tests: correctly close filesystems
2026-07-26 23:30:36 +02:00
Alessandro (Ale) Segala and Elias Schneider
a1b4e1d2b2
feat: migrate one-time and signup tokens to an actor ( #1611 )
...
Co-authored-by: Elias Schneider <login@eliasschneider.com >
2026-07-26 15:32:43 +02:00
Alessandro (Ale) Segala and Claude
2cfbcb4b67
refactor: use actors for db configuration ( #1604 )
...
Co-authored-by: Claude <noreply@anthropic.com >
2026-07-20 08:48:05 +02:00
Elias Schneider
807bd9e037
feat: add support for proxy protocol
2026-07-17 10:37:47 +02:00
Alessandro (Ale) Segala
cfda5f693b
refactor: manage instance ID in the KV table ( #1579 )
2026-07-11 16:16:05 +02:00
9607495ab4
refactor: integrate Francis actor framework for background jobs, cron scheduling, and rate limiting ( #1556 )
...
Co-authored-by: Elias Schneider <login@eliasschneider.com >
Co-authored-by: Claude <noreply@anthropic.com >
2026-07-03 08:36:45 +02:00
Elias Schneider
bc4f75c44f
refactor: fix linter issues
2026-05-29 12:25:06 +02:00
Elias Schneider
a71219637a
fix: add support for unix socket mode in healthcheck
2026-05-29 12:11:26 +02:00
Alessandro (Ale) Segala
832b7fbff4
fix: better error messages when there's another instance of Pocket ID running ( #1370 )
2026-03-08 15:37:38 +01:00
Elias Schneider
2af70d9b4d
feat: add CLI command for encryption key rotation ( #1209 )
2026-01-07 09:34:23 +01:00
3420a00073
feat: add CLI command for importing and exporting Pocket ID data ( #998 )
...
Co-authored-by: Alessandro (Ale) Segala <43508+ItalyPaleAle@users.noreply.github.com >
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
2025-12-30 17:01:22 +01:00
Elias Schneider
f0144584af
feat!: drop support for storing JWK on the filesystem ( #1088 )
2025-12-30 17:01:22 +01:00
Elias Schneider
3eaf36aae7
fix: restrict email one time sign in token to same browser ( #1144 )
2025-12-12 14:51:07 +01:00
Alessandro (Ale) Segala
7ab0fd3028
fix: for one-time access tokens and signup tokens, pass TTLs instead of absolute expiration date ( #855 )
2025-08-22 08:02:56 +02:00
Elias Schneider
5a031f5d1b
refactor: use reflection to mark file based env variables ( #815 )
2025-08-07 20:41:00 +02:00
Alessandro (Ale) Segala
42a861d206
refactor: complete conversion of log calls to slog ( #787 )
2025-07-27 04:34:23 +00:00
Alessandro (Ale) Segala
1a41b05f60
feat: distroless container additional variant + healthcheck command ( #716 )
2025-07-04 12:26:01 -07:00
Alessandro (Ale) Segala
8c8fc2304d
feat: add "key-rotate" command ( #709 )
2025-07-03 22:23:24 +02:00
Alessandro (Ale) Segala
3896b7bb3b
chore: address linter's complaint in 1.0 branch ( #546 )
2025-05-24 22:55:46 +02:00
Alessandro (Ale) Segala
cb2a9f9f7d
refactor: replace create-one-time-access-token script with in-app functionality ( #540 )
2025-05-24 22:55:46 +02:00
ItalyPaleAle