clinch

Fix CSP errors - migrate inline JS to stimulus controllers. Add a URL for applications so users can discover them

CI #49:Commit bf104a9983 pushed by dkam

main

2025-11-04 07:48:21 +00:00

0s

Fix storing passkeys

CI #48:Commit ec13dd2b60 pushed by dkam

main

2025-11-04 06:06:59 +00:00

0s

Add webauthn

CI #47:Commit 57abc0b804 pushed by dkam

main

2025-11-04 05:32:56 +00:00

0s

Move sessions into their own view for easier management

CI #46:Commit 19bfc21f11 pushed by dkam

main

2025-11-04 05:20:16 +00:00

0s

Massive refactor. Merge forward_auth into App, remove references to unimplemented OIDC federation and SAML features. Add group and user custom claims. Groups now allocate which apps a user can use

CI #45:Commit ef15db77f9 pushed by dkam

main

2025-11-04 04:19:46 +00:00

0s

Update the .env.example file

CI #44:Commit 517029247d pushed by dkam

main

2025-10-30 05:47:55 +00:00

0s

More nuanced domain fetching for host validation

CI #43:Commit bfcc5cdc84 pushed by dkam

main

2025-10-29 05:35:33 +00:00

0s

Add comprhensive csp polices and reporting endpoint. Add environment support require for protecting against rebinding attacks on ip addresses

CI #42:Commit ddcb297c74 pushed by dkam

main

2025-10-29 05:33:18 +00:00

0s

Rate limit the forward_auth controller

CI #41:Commit 6f7de94623 pushed by dkam

main

2025-10-29 04:38:01 +00:00

0s

Use the IPAddr library to detect ipv4 and ipv6 addresses

CI #40:Commit baa75a3456 pushed by dkam

main

2025-10-29 02:55:42 +00:00

0s

Use the IPAddr library to detect ipv4 and ipv6 addresses

CI #39:Commit 54025917de pushed by dkam

main

2025-10-29 02:52:57 +00:00

0s

Improve finding the requested host's domain for setting the domain cookie

CI #38:Commit d96a864436 pushed by dkam

main

2025-10-29 02:47:09 +00:00

0s

remove incorrectly named files

CI #37:Commit a36eb6d1f3 pushed by dkam

main

2025-10-28 23:25:56 +00:00

0s

Rename thumbshots

CI #36:Commit 9c79b4a0b2 pushed by dkam

main

2025-10-27 22:01:33 +00:00

0s

Add screenshots

CI #35:Commit d9cab0770e pushed by dkam

main

2025-10-27 21:58:12 +00:00

0s

Increase thumb

CI #34:Commit 0b16b62d34 pushed by dkam

main

2025-10-27 21:52:23 +00:00

0s

Add a screenshot

CI #33:Commit 2d8ea0fecf pushed by dkam

main

2025-10-27 21:35:15 +00:00

0s

Update docs. Implemented a one-time token to work around domain cookies not being immediately return by the browser. Reduce db queries on /api/verify requests.

CI #32:Commit 94785dbfe7 pushed by dkam

main

2025-10-27 21:34:20 +00:00

0s

Bump actions/upload-artifact from 4 to 5

CI #31:Commit 02e46a7168 pushed by dkam

main

2025-10-27 21:20:23 +00:00

0s

More tests

CI #30:Commit a2a954b4c3 pushed by dkam

main

2025-10-27 09:07:30 +00:00

0s

Bug fix

CI #29:Commit 0ce38e3202 pushed by dkam

main

2025-10-26 12:56:12 +00:00

0s

Some more tests. Fix invitation link and password reset links. After creating their account and setting a password, the user is logged in

CI #28:Commit 431e947a4c pushed by dkam

main

2025-10-26 12:20:50 +00:00

0s

Add an invite system

CI #27:Commit 39757a43dc pushed by dkam

main

2025-10-25 17:47:55 +00:00

0s

Increase the thing

CI #26:Commit 5463723455 pushed by dkam

main

2025-10-24 12:26:13 +00:00

0s

Bug fix

CI #25:Commit e36850f8ba pushed by dkam

main

2025-10-24 09:49:03 +00:00

0s

Remember that we concented.

CI #24:Commit 0af3dbefed pushed by dkam

main

2025-10-24 06:07:25 +00:00

0s

Whoops - add oidc logout

CI #23:Commit d6c24e50df pushed by dkam

main

2025-10-24 06:01:08 +00:00

0s

Add nonce to the auth codes

CI #22:Commit 8c80343b89 pushed by dkam

main

2025-10-24 05:48:03 +00:00

0s

Don't use turbo when we expect to redirect

CI #21:Commit 2db7f6a9df pushed by dkam

main

2025-10-24 05:34:45 +00:00

0s

Fix and cleanup

CI #20:Commit e3f202f574 pushed by dkam

main

2025-10-24 05:27:16 +00:00

0s