Alessandro (Ale) Segala
|
307caaa3ef
|
feat: return new id_token when using refresh token (#925)
|
2025-09-09 11:31:50 +02:00 |
|
Alessandro (Ale) Segala
|
42155238b7
|
fix: ensure users imported from LDAP have fields validated (#923)
|
2025-09-09 09:31:49 +02:00 |
|
Elias Schneider
|
6215e1ac01
|
feat: add CSP header (#908)
Co-authored-by: Alessandro (Ale) Segala <43508+ItalyPaleAle@users.noreply.github.com>
|
2025-09-07 11:45:06 -07:00 |
|
Savely Krasovsky
|
901333f7e4
|
feat: client_credentials flow support (#901)
|
2025-09-02 18:33:01 -05:00 |
|
Kyle Mendell
|
802754c24c
|
refactor: use react email for email templates (#734)
Co-authored-by: Alessandro (Ale) Segala <43508+ItalyPaleAle@users.noreply.github.com>
Co-authored-by: Elias Schneider <login@eliasschneider.com>
|
2025-08-31 16:54:13 +00:00 |
|
Stephan H.
|
a3979f63e0
|
feat: add custom base url (#858)
Co-authored-by: Stephan Höhn <me@steph.ovh>
Co-authored-by: Kyle Mendell <ksm@ofkm.us>
|
2025-08-30 13:13:57 -05:00 |
|
Elias Schneider
|
641bbc9351
|
fix: apps showed multiple times if user is in multiple groups
|
2025-08-27 17:53:21 +02:00 |
|
Elias Schneider
|
51222f5607
|
tests: add no tx wrap to unit tests
|
2025-08-24 23:16:49 +02:00 |
|
Elias Schneider
|
d6d1a4ced2
|
fix: sqlite migration drops allowed user groups
|
2025-08-24 23:07:50 +02:00 |
|
Alessandro (Ale) Segala
|
1f3550c9bd
|
fix: ensure SQLite has a writable temporary directory (#876)
Co-authored-by: Elias Schneider <login@eliasschneider.com>
|
2025-08-24 20:50:51 +02:00 |
|
Elias Schneider
|
10b087640f
|
tests: fix postgres e2e tests (#877)
|
2025-08-24 19:15:26 +02:00 |
|
Elias Schneider
|
d0392d25ed
|
fix: sort order incorrect for apps when using postgres
|
2025-08-24 19:08:33 +02:00 |
|
Elias Schneider
|
c114a2edaa
|
feat: support automatic db migration rollbacks (#874)
|
2025-08-24 16:56:28 +02:00 |
|
Elias Schneider
|
a5efb95065
|
feat: allow custom client IDs (#864)
|
2025-08-23 18:41:05 +02:00 |
|
Elias Schneider
|
625f235740
|
fix: enable foreign key check for sqlite (#863)
Co-authored-by: Alessandro (Ale) Segala <43508+ItalyPaleAle@users.noreply.github.com>
|
2025-08-23 17:54:51 +02:00 |
|
Elias Schneider
|
2c122d413d
|
refactor: run formatter
|
2025-08-23 17:46:59 +02:00 |
|
Elias Schneider
|
24e274200f
|
fix: ferated identities can't be cleared
|
2025-08-23 17:40:06 +02:00 |
|
Zeedif
|
182d809028
|
feat(signup): add default user groups and claims for new users (#812)
Co-authored-by: Kyle Mendell <kmendell@ofkm.us>
Co-authored-by: Elias Schneider <login@eliasschneider.com>
|
2025-08-22 14:25:02 +02:00 |
|
Robert Mang
|
0cb039d35d
|
feat: add option to OIDC client to require re-authentication (#747)
Co-authored-by: Kyle Mendell <kmendell@ofkm.us>
Co-authored-by: Elias Schneider <login@eliasschneider.com>
|
2025-08-22 08:56:40 +02:00 |
|
Alessandro (Ale) Segala
|
7ab0fd3028
|
fix: for one-time access tokens and signup tokens, pass TTLs instead of absolute expiration date (#855)
|
2025-08-22 08:02:56 +02:00 |
|
Alessandro (Ale) Segala
|
9339e88a5a
|
fix: move audit log call before TX is committed (#854)
|
2025-08-20 17:01:53 -05:00 |
|
Elias Schneider
|
fe003b927c
|
fix: delete webauthn session after login to prevent replay attacks
|
2025-08-20 15:49:19 +02:00 |
|
Elias Schneider
|
3188e92257
|
feat: display all accessible oidc clients in the dashboard (#832)
Co-authored-by: Kyle Mendell <ksm@ofkm.us>
|
2025-08-17 22:47:34 +02:00 |
|
James18232
|
7b1f6b8857
|
fix: ignore client secret if client is public (#836)
Co-authored-by: James18232 <80368042+James18232@users.noreply.github.com>
|
2025-08-16 17:55:32 +02:00 |
|
Alessandro (Ale) Segala
|
17d8893bdb
|
chore: update deps and Go 1.25 (#833)
|
2025-08-14 22:33:27 -05:00 |
|
Kyle Mendell
|
484c2f6ef2
|
feat: user application dashboard (#727)
Co-authored-by: Elias Schneider <login@eliasschneider.com>
|
2025-08-10 15:56:03 +00:00 |
|
Elias Schneider
|
5a031f5d1b
|
refactor: use reflection to mark file based env variables (#815)
|
2025-08-07 20:41:00 +02:00 |
|
Alessandro (Ale) Segala
|
535bc9f46b
|
chore: additional logs for database connections (#813)
|
2025-08-06 18:04:25 +02:00 |
|
Alessandro (Ale) Segala
|
0a3b1c6530
|
feat: support reading secret env vars from _FILE (#799)
Co-authored-by: Kyle Mendell <ksm@ofkm.us>
|
2025-07-30 11:59:25 -05:00 |
|
Kyle Mendell
|
d479817b6a
|
feat: add support for code_challenge_methods_supported (#794)
|
2025-07-29 17:34:49 -05:00 |
|
Alessandro (Ale) Segala
|
42a861d206
|
refactor: complete conversion of log calls to slog (#787)
|
2025-07-27 04:34:23 +00:00 |
|
Alessandro (Ale) Segala
|
78266e3e4c
|
feat: Support OTel and JSON for logs (via log/slog) (#760)
Co-authored-by: Kyle Mendell <kmendell@ofkm.us>
|
2025-07-27 01:03:52 +00:00 |
|
Alessandro (Ale) Segala
|
c8478d75be
|
fix: delete WebAuthn registration session after use (#783)
|
2025-07-26 18:45:54 -05:00 |
|
Kyle Mendell
|
ef1d599662
|
fix: use user-agent for identifying known device signins
|
2025-07-20 19:02:17 -05:00 |
|
Alessandro (Ale) Segala
|
7b4ccd1f30
|
fix: ensure user inputs are normalized (#724)
Co-authored-by: Elias Schneider <login@eliasschneider.com>
|
2025-07-13 16:15:57 +00:00 |
|
Kyle Mendell
|
b03e91b653
|
fix: allow passkey names up to 50 characters
|
2025-07-11 22:10:59 -05:00 |
|
Alessandro (Ale) Segala
|
e1de593dcd
|
fix: login failures on Postgres when IP is null (#737)
|
2025-07-09 08:45:07 -05:00 |
|
Elias Schneider
|
857b9cc864
|
refactor: run formatter
|
2025-07-06 15:32:19 +02:00 |
|
Elias Schneider
|
bf042563e9
|
feat: add support for OAuth 2.0 Authorization Server Issuer Identification
|
2025-07-06 15:29:26 +02:00 |
|
Alessandro (Ale) Segala
|
7fe83f8087
|
fix: actually fix linter issues (#720)
|
2025-07-04 21:14:44 -05:00 |
|
Alessandro (Ale) Segala
|
43f0114c57
|
fix: linter issues (#719)
|
2025-07-04 18:29:28 -05:00 |
|
Alessandro (Ale) Segala
|
1a41b05f60
|
feat: distroless container additional variant + healthcheck command (#716)
|
2025-07-04 12:26:01 -07:00 |
|
Elias Schneider
|
81315790a8
|
fix: support non UTF-8 LDAP IDs (#714)
|
2025-07-04 08:42:11 +02:00 |
|
Alessandro (Ale) Segala
|
8c8fc2304d
|
feat: add "key-rotate" command (#709)
|
2025-07-03 22:23:24 +02:00 |
|
Alessandro (Ale) Segala
|
5550729120
|
feat: encrypt private keys saved on disk and in database (#682)
Co-authored-by: Kyle Mendell <kmendell@ofkm.us>
|
2025-07-03 13:34:34 -05:00 |
|
Elias Schneider
|
aefb308536
|
fix: token introspection authentication not handled correctly (#704)
Co-authored-by: Alessandro (Ale) Segala <43508+ItalyPaleAle@users.noreply.github.com>
|
2025-07-01 21:14:07 +00:00 |
|
Alessandro (Ale) Segala
|
031181ad2a
|
fix: auth fails when client IP is empty on Postgres (#695)
|
2025-06-30 14:04:30 +02:00 |
|
Elias Schneider
|
fceb6fa7b4
|
fix: add missing error check in initial user setup
|
2025-06-29 15:10:39 +02:00 |
|
Alessandro (Ale) Segala
|
c290c027fb
|
refactor: use github.com/jinzhu/copier for MapStruct (#698)
|
2025-06-29 15:01:10 +02:00 |
|
Elias Schneider
|
287314f016
|
feat: improve initial admin creation workflow
|
2025-06-27 23:41:05 +02:00 |
|