292 Commits
Author SHA1 Message Date
Alessandro (Ale) Segala 22e3909c6c refactor: move GeoLite to its own package (#1647) 2026-08-05 22:12:19 +02:00
Alessandro (Ale) Segala 1c9233c236 fix: make OIDC client token lifetimes optional (#1650) 2026-08-05 20:11:40 +00:00
08407ae564 feat: include Francis data in Pocket ID backups (#1645)
Co-authored-by: Claude <noreply@anthropic.com>
Co-authored-by: Elias Schneider <login@eliasschneider.com>
2026-08-05 19:57:38 +00:00
Elias Schneider 5d43c4aaeb feat: add ability to customize session duration of clients (#1641) 2026-08-03 23:23:29 +02:00
Elias Schneider 7a4d0dd275 refactor: standardize API error handling (#1635) 2026-08-02 23:36:06 +02:00
Elias Schneider 598895e7c5 fix: session revoke fails if orphaned session tokens exist 2026-08-02 18:31:15 +02:00
Jean-François RoyandElias Schneider 1934efa84c feat: implement OAuth Client ID Metadata Document (#1525) (#1526)
Co-authored-by: Elias Schneider <login@eliasschneider.com>
2026-08-02 15:05:39 +00:00
Elias Schneider 7c55bdf115 feat: make oauth access tokens RFC 9068 compliant 2026-08-02 15:59:21 +02:00
2ef7c93fee feat: migrate app locks to Francis (#1624)
Co-authored-by: Elias Schneider <login@eliasschneider.com>
Co-authored-by: Kyle Mendell <kmendell@ofkm.us>
2026-07-29 22:15:40 +02:00
Elias SchneiderandItalyPaleAle e1fd1d320f feat: add qr code alternative sign in method (#1594)
Co-authored-by: ItalyPaleAle <43508+ItalyPaleAle@users.noreply.github.com>
2026-07-28 01:30:13 +02:00
Elias Schneider 43aaccd5bf refactor: modularize email module and use actor for email verification (#1625) 2026-07-27 20:00:59 +02:00
Elias Schneider 6bd4679bab tests: correctly close filesystems 2026-07-26 23:30:36 +02:00
Markus Schanz 9f559788a4 feat: add support for declaritive client secret configuration (#1619) 2026-07-26 16:27:42 +02:00
Alessandro (Ale) SegalaandElias Schneider a1b4e1d2b2 feat: migrate one-time and signup tokens to an actor (#1611)
Co-authored-by: Elias Schneider <login@eliasschneider.com>
2026-07-26 15:32:43 +02:00
Markus Schanz 80c7c4aaf1 feat: add declaritive user id configuration (#1622) 2026-07-25 23:43:16 +02:00
Elias Schneider e10f66c07a fix: show only accessible clients on "My Apps" page 2026-07-22 18:33:57 +02:00
Elias Schneider ad06ea6e00 fix: datatype mismatch between postgres and sqlite causes import to fail 2026-07-22 18:13:13 +02:00
Alessandro (Ale) SegalaandClaude 2cfbcb4b67 refactor: use actors for db configuration (#1604)
Co-authored-by: Claude <noreply@anthropic.com>
2026-07-20 08:48:05 +02:00
Alessandro (Ale) Segala b254d969a5 fix: sync group membership for users added at creation time (#1600) 2026-07-17 11:15:00 -07:00
Alessandro (Ale) Segala cfda5f693b refactor: manage instance ID in the KV table (#1579) 2026-07-11 16:16:05 +02:00
Sean McKenzieandElias Schneider 6734585712 feat: add description field to oidc clients (#1547)
Co-authored-by: Elias Schneider <login@eliasschneider.com>
2026-07-08 13:41:51 +02:00
Elias Schneider c85a4e63da fix: disable one time access token exchange for disabled users 2026-07-08 12:04:16 +02:00
Elias Schneider ce7d3a7e1d tests(unit): fix wrong migration name 2026-07-08 11:51:43 +02:00
Elias SchneiderandAlessandro Segala 09d196f7c5 feat: add OAuth APIs with scoped permissions (#1542)
Co-authored-by: Alessandro (Ale) Segala <43508+ItalyPaleAle@users.noreply.github.com>
2026-07-06 12:25:02 -07:00
Alessandro (Ale) Segala eefd51cc4d fix: various bugs in observability / OTel (#1564) 2026-07-05 14:14:39 -07:00
Alessandro (Ale) Segala f68ad42618 chore: use go-kit for sending emails (#1565) 2026-07-05 13:10:11 -07:00
9607495ab4 refactor: integrate Francis actor framework for background jobs, cron scheduling, and rate limiting (#1556)
Co-authored-by: Elias Schneider <login@eliasschneider.com>
Co-authored-by: Claude <noreply@anthropic.com>
2026-07-03 08:36:45 +02:00
Elias Schneider ecad31cae2 refactor: migrate signup functionality to single usersignup module 2026-06-30 20:53:31 +02:00
Elias Schneider 58fcf7cbe6 refactor: migrate Webauthn functionality to single webauthn module 2026-06-29 14:05:07 +02:00
Elias Schneider 9fce987106 refactor: migrate API key functionality to single apikey module 2026-06-29 12:11:18 +02:00
97bd466f38 feat: prompt admin with PKCE client support hint (#1499)
Co-authored-by: james <james@goldfish.net>
Co-authored-by: Alessandro (Ale) Segala <43508+ItalyPaleAle@users.noreply.github.com>
Co-authored-by: Elias Schneider <login@eliasschneider.com>
Co-authored-by: Kyle Mendell <kmendell@ofkm.us>
2026-06-28 11:10:30 -07:00
Elias Schneider d467855870 feat: add ability to skip consent for client 2026-06-26 23:35:26 +02:00
Elias Schneider 519cda0eef refactor: remove dead code 2026-06-22 21:58:55 +02:00
Elias Schneider 8158452b37 refactor: use fosite for OAuth 2.0 logic (#1520) 2026-06-22 18:42:02 +02:00
Elias Schneider 8a75774971 fix: callback URL validation not validated if prompt=none 2026-06-16 12:02:57 +02:00
Elias Schneider 3d9d4de619 fix: PAR parameters not respected by authorize page 2026-06-16 09:29:34 +02:00
Elias Schneider 4f97cd4188 refactor: fix linter issues 2026-06-02 14:08:33 +02:00
Thibault NORMANDandElias Schneider 68a5abdcca feat(oauth): add support for Pushed Authorization Requests (RFC9126) (#1404)
Co-authored-by: Elias Schneider <login@eliasschneider.com>
2026-06-02 14:02:12 +02:00
Elias Schneider 5db570bf66 feat: remove EXIF/XMP metadata from uploaded images (#1477) 2026-05-19 20:56:14 -07:00
Elias Schneider 9dd3d319cf feat: delete OAuth refresh token on RP initiated logout (#1480) 2026-05-19 17:05:44 +02:00
Elias Schneider cc9163f577 fix: make stream of downloaded logos seekable for S3 checksum calculation 2026-05-19 16:28:30 +02:00
Elias Schneider b27a52a591 revert: delete refresh tokens on end-session to prevent reuse after logout (#1458)
This reverts commit 7aacbd0245.
2026-05-18 23:36:39 +02:00
Elias Schneider 8ad95b8af1 refactor: apply go 1.26.0 syntax updated 2026-05-18 23:06:54 +02:00
Elias Schneider ce6bdb9d7e fix: reject unknown PKCE code challenge methods 2026-05-18 22:07:20 +02:00
Elias Schneider 8b22fcaaa4 fix: add email_verified to reserved claims list 2026-05-18 21:08:51 +02:00
wucm667andAlessandro Segala 7aacbd0245 fix(oidc): delete refresh tokens on end-session to prevent reuse after logout (#1458)
Co-authored-by: Alessandro (Ale) Segala <43508+ItalyPaleAle@users.noreply.github.com>
Signed-off-by: wucm667 <stevenwucongmin@gmail.com>
2026-05-15 21:25:40 +00:00
Alessandro (Ale) SegalaandElias Schneider f4706cd6cc feat: add support for "select_account" prompt (#1453)
Co-authored-by: Elias Schneider <login@eliasschneider.com>
2026-04-26 17:26:21 +00:00
Elias Schneider e33a9b8c88 chore: post dependency upgrade fixes 2026-04-26 15:46:35 +02:00
64d4ac7919 feat: add support for response_mode=form_post (#1360)
Co-authored-by: Alessandro (Ale) Segala <43508+ItalyPaleAle@users.noreply.github.com>
Co-authored-by: Kyle Mendell <kmendell@ofkm.us>
Co-authored-by: Elias Schneider <login@eliasschneider.com>
2026-04-26 14:11:35 +02:00
Alessandro (Ale) Segala 2f0338211d chore: update golangci-lint (#1440) 2026-04-21 11:53:06 -05:00