Kyle Mendell
|
ef1d599662
|
fix: use user-agent for identifying known device signins
|
2025-07-20 19:02:17 -05:00 |
|
Alessandro (Ale) Segala
|
7b4ccd1f30
|
fix: ensure user inputs are normalized (#724)
Co-authored-by: Elias Schneider <login@eliasschneider.com>
|
2025-07-13 16:15:57 +00:00 |
|
Alessandro (Ale) Segala
|
e1de593dcd
|
fix: login failures on Postgres when IP is null (#737)
|
2025-07-09 08:45:07 -05:00 |
|
Elias Schneider
|
81315790a8
|
fix: support non UTF-8 LDAP IDs (#714)
|
2025-07-04 08:42:11 +02:00 |
|
Alessandro (Ale) Segala
|
5550729120
|
feat: encrypt private keys saved on disk and in database (#682)
Co-authored-by: Kyle Mendell <kmendell@ofkm.us>
|
2025-07-03 13:34:34 -05:00 |
|
Elias Schneider
|
aefb308536
|
fix: token introspection authentication not handled correctly (#704)
Co-authored-by: Alessandro (Ale) Segala <43508+ItalyPaleAle@users.noreply.github.com>
|
2025-07-01 21:14:07 +00:00 |
|
Alessandro (Ale) Segala
|
031181ad2a
|
fix: auth fails when client IP is empty on Postgres (#695)
|
2025-06-30 14:04:30 +02:00 |
|
Elias Schneider
|
fceb6fa7b4
|
fix: add missing error check in initial user setup
|
2025-06-29 15:10:39 +02:00 |
|
Elias Schneider
|
287314f016
|
feat: improve initial admin creation workflow
|
2025-06-27 23:41:05 +02:00 |
|
Elias Schneider
|
ba61cdba4e
|
feat: redact sensitive app config variables if set with env variable
|
2025-06-27 22:22:28 +02:00 |
|
Kyle Mendell
|
dcd1ae96e0
|
feat: self-service user signup (#672)
Co-authored-by: Elias Schneider <login@eliasschneider.com>
|
2025-06-27 15:01:10 -05:00 |
|
Elias Schneider
|
1fdb058386
|
docs: clarify confusing user update logic
|
2025-06-27 17:20:51 +02:00 |
|
Elias Schneider
|
29cb5513a0
|
fix: users can't be updated by admin if self account editing is disabled
|
2025-06-27 17:15:26 +02:00 |
|
Elias Schneider
|
7d36bda769
|
fix: app not starting if UI config is disabled and Postgres is used
|
2025-06-22 21:21:14 +02:00 |
|
Kyle Mendell
|
d5485238b8
|
feat: configurable local ipv6 ranges for audit log (#657)
|
2025-06-19 19:56:27 +02:00 |
|
Kyle Mendell
|
ac5a121f66
|
feat: location filter for global audit log (#662)
|
2025-06-19 17:12:53 +00:00 |
|
Kyle Mendell
|
883877adec
|
feat: ui accent colors (#643)
Co-authored-by: Elias Schneider <login@eliasschneider.com>
|
2025-06-13 07:06:54 -05:00 |
|
Elias Schneider
|
1bcb50edc3
|
fix: allow images with uppercase file extension
|
2025-06-10 11:11:03 +02:00 |
|
Alessandro (Ale) Segala
|
b62b61fb01
|
feat: allow introspection and device code endpoints to use Federated Client Credentials (#640)
|
2025-06-09 21:17:55 +02:00 |
|
Kyle Mendell
|
c111b79147
|
feat: oidc client data preview (#624)
Co-authored-by: Elias Schneider <login@eliasschneider.com>
|
2025-06-09 15:46:03 +00:00 |
|
Alessandro (Ale) Segala
|
05bfe00924
|
feat: JWT bearer assertions for client authentication (#566)
Co-authored-by: Kyle Mendell <ksm@ofkm.us>
Co-authored-by: Kyle Mendell <kmendell@ofkm.us>
Co-authored-by: Elias Schneider <login@eliasschneider.com>
|
2025-06-06 12:23:51 +02:00 |
|
Elias Schneider
|
61b62d4612
|
fix: OIDC client image can't be deleted
|
2025-06-06 08:50:33 +02:00 |
|
Elias Schneider
|
dc5d7bb2f3
|
refactor: run fomratter
|
2025-06-05 22:43:24 +02:00 |
|
Elias Schneider
|
5e9096e328
|
fix: UI config overridden by env variables don't apply on first start
|
2025-06-05 22:36:55 +02:00 |
|
Elias Schneider
|
d217083059
|
feat: add API endpoint for user authorized clients
|
2025-06-04 09:23:44 +02:00 |
|
Elias Schneider
|
6c00aaa3ef
|
fix: allow users to update their locale even when own account update disabled
|
2025-06-02 11:35:13 +02:00 |
|
Elias Schneider
|
00259f8819
|
tests: adapt unit test for new app config default value behavior
|
2025-06-01 20:54:53 +02:00 |
|
Elias Schneider
|
decf8ec70b
|
fix: clear default app config variables from database
|
2025-06-01 20:46:44 +02:00 |
|
Alessandro (Ale) Segala
|
256f74d0a3
|
fix: don't use TOFU for logout callback URLs (#588)
|
2025-05-29 22:01:23 +02:00 |
|
Kyle Mendell
|
20d3f780a2
|
feat: auto detect callback url (#583)
Co-authored-by: Elias Schneider <login@eliasschneider.com>
|
2025-05-29 17:16:10 +02:00 |
|
Kyle Mendell
|
b874681824
|
fix: show LAN for auditlog location for internal networks
|
2025-05-28 10:52:40 -05:00 |
|
Elias Schneider
|
e0ec607198
|
feat: add daily heartbeat request for counting Pocket ID instances (#578)
|
2025-05-28 11:19:45 +02:00 |
|
Elias Schneider
|
f03b80f9d7
|
fix: run user group count inside a transaction
|
2025-05-25 22:24:28 +02:00 |
|
Kyle Mendell
|
38d7ee4432
|
feat: show allowed group count on oidc client list (#567)
Co-authored-by: Elias Schneider <login@eliasschneider.com>
|
2025-05-25 19:22:25 +00:00 |
|
Kyle Mendell
|
f66e8e8b44
|
fix: use ldapAttributeUserUsername for finding group members (#565)
Co-authored-by: Elias Schneider <login@eliasschneider.com>
|
2025-05-25 20:37:17 +02:00 |
|
Elias Schneider
|
68e4b67bd2
|
feat: require user verification for passkey sign in
|
2025-05-25 17:09:05 +02:00 |
|
Alessandro (Ale) Segala
|
b71c84c355
|
refactor: some clean-up in OIDC service and controller (#550)
|
2025-05-24 22:55:46 +02:00 |
|
Alessandro (Ale) Segala
|
cb2a9f9f7d
|
refactor: replace create-one-time-access-token script with in-app functionality (#540)
|
2025-05-24 22:55:46 +02:00 |
|
Elias Schneider
|
bf710aec56
|
fix: custom logo not correctly loaded if UI configuration is disabled
|
2025-05-22 19:07:34 +02:00 |
|
Alessandro (Ale) Segala
|
a408ef797b
|
refactor: switch SQLite driver to pure-Go implementation (#530)
|
2025-05-14 09:29:04 +02:00 |
|
Kyle Mendell
|
73c82ae43a
|
tests: add e2e LDAP tests (#466)
Co-authored-by: Elias Schneider <login@eliasschneider.com>
|
2025-05-07 14:38:02 +00:00 |
|
Daenney
|
6f54ee5d66
|
feat: OpenTelemetry tracing and metrics (#262) (#495)
Co-authored-by: ItalyPaleAle <43508+ItalyPaleAle@users.noreply.github.com>
|
2025-05-05 15:59:44 +02:00 |
|
Elias Schneider
|
0b9cbf47e3
|
fix: allow LDAP users to update their locale
|
2025-05-03 23:32:56 +02:00 |
|
Alessandro (Ale) Segala
|
bda178c2bb
|
refactor: complete graceful shutdown implementation and add service runner (#493)
|
2025-05-03 23:25:22 +02:00 |
|
Elias Schneider
|
ce24372c57
|
fix: do not require PKCE for public clients
|
2025-04-28 11:02:35 +02:00 |
|
Elias Schneider
|
4614769b84
|
refactor: reorganize imports
|
2025-04-28 10:49:54 +02:00 |
|
Elias Schneider
|
0a24ab8001
|
fix: updating scopes of an authorized client fails with Postgres
|
2025-04-28 09:29:18 +02:00 |
|
Alessandro (Ale) Segala
|
4c33793678
|
fix: pass context to methods that were missing it (#487)
|
2025-04-26 12:32:42 -05:00 |
|
Kyle Mendell
|
22f7d64bf0
|
feat: device authorization endpoint (#270)
Co-authored-by: Elias Schneider <login@eliasschneider.com>
|
2025-04-25 12:14:51 -05:00 |
|
Alessandro (Ale) Segala
|
270c30334d
|
fix: prevent deadlock when trying to delete LDAP users (#471)
|
2025-04-22 15:16:44 +02:00 |
|