Elias Schneider 3ffe013886 feat: add ability to override SSRF protection with OUTBOUND_ALLOWED_HOSTS_*

2026-10-09 22:42:04 +02:00

..

api

refactor: authorize API routes with per-endpoint scopes (#1823)

2026-10-09 21:33:14 +02:00

apikey

refactor: authorize API routes with per-endpoint scopes (#1823)

2026-10-09 21:33:14 +02:00

appconfig

feat: add configurable login notification modes (#1813)

2026-10-07 20:16:27 +02:00

apperror

refactor: authorize API routes with per-endpoint scopes (#1823)

2026-10-09 21:33:14 +02:00

auditlogs

refactor: authorize API routes with per-endpoint scopes (#1823)

2026-10-09 21:33:14 +02:00

authz

refactor: authorize API routes with per-endpoint scopes (#1823)

2026-10-09 21:33:14 +02:00

backchannellogout

feat: add OIDC back-channel logout (#1734)

2026-09-23 21:34:38 +02:00

bootstrap

feat: add ability to override SSRF protection with OUTBOUND_ALLOWED_HOSTS_*

2026-10-09 22:42:04 +02:00

cmds

feat: add FRANCIS_HOST to connect to a standalone Francis runtime (#1768)

2026-09-20 18:30:26 -07:00

common

feat: add ability to override SSRF protection with OUTBOUND_ALLOWED_HOSTS_*

2026-10-09 22:42:04 +02:00

controller

refactor: authorize API routes with per-endpoint scopes (#1823)

2026-10-09 21:33:14 +02:00

devicelogin

refactor: authorize API routes with per-endpoint scopes (#1823)

2026-10-09 21:33:14 +02:00

dto

feat: add configurable login notification modes (#1813)

2026-10-07 20:16:27 +02:00

email

feat: add configurable login notification modes (#1813)

2026-10-07 20:16:27 +02:00

emailverification

refactor: authorize API routes with per-endpoint scopes (#1823)

2026-10-09 21:33:14 +02:00

environment

refactor: authorize API routes with per-endpoint scopes (#1823)

2026-10-09 21:33:14 +02:00

geolite

feat: add support Cloudflare location headers

2026-10-01 20:53:38 +02:00

httpserver

fix: don't rely on content length header for optional json binding

2026-08-04 21:10:17 +02:00

instanceid

chore: update Francis to rc.2 (#1728)

2026-08-31 05:15:48 -07:00

iplocation

feat: add support Cloudflare location headers

2026-10-01 20:53:38 +02:00

job

refactor: migrate SCIM sync to actor + add tests (#1680)

2026-08-18 21:54:06 +02:00

ldapsync

fix: limit LDAP profile picture downloads to 2 MB

2026-10-09 22:39:13 +02:00

logopreset

refactor: authorize API routes with per-endpoint scopes (#1823)

2026-10-09 21:33:14 +02:00

middleware

refactor: authorize API routes with per-endpoint scopes (#1823)

2026-10-09 21:33:14 +02:00

model

feat: add configurable login notification modes (#1813)

2026-10-07 20:16:27 +02:00

oidc

feat: add ability to override SSRF protection with OUTBOUND_ALLOWED_HOSTS_*

2026-10-09 22:42:04 +02:00

onetimeaccess

refactor: authorize API routes with per-endpoint scopes (#1823)

2026-10-09 21:33:14 +02:00

outbound

feat: add ability to override SSRF protection with OUTBOUND_ALLOWED_HOSTS_*

2026-10-09 22:42:04 +02:00

scimsync

refactor: authorize API routes with per-endpoint scopes (#1823)

2026-10-09 21:33:14 +02:00

service

feat: add ability to override SSRF protection with OUTBOUND_ALLOWED_HOSTS_*

2026-10-09 22:42:04 +02:00

storage

chore: update Francis to rc.2 (#1728)

2026-08-31 05:15:48 -07:00

tracing

fix: various bugs in observability / OTel (#1564)

2026-07-05 14:14:39 -07:00

usersignup

refactor: authorize API routes with per-endpoint scopes (#1823)

2026-10-09 21:33:14 +02:00

utils

feat: add ability to override SSRF protection with OUTBOUND_ALLOWED_HOSTS_*

2026-10-09 22:42:04 +02:00

webauthn

refactor: authorize API routes with per-endpoint scopes (#1823)

2026-10-09 21:33:14 +02:00