clinch

Remove the rate limit for the forward auth system

#66:Commit ab362aabac pushed by dkam

main

2025-12-28 03:40:58 +00:00

0s

Handle empty backchannel logout urls

#65:Commit 7af8624bf8 pushed by dkam

main

2025-12-01 14:44:51 +00:00

0s

Add a subdirectory for active storage

#64:Commit f8543f98cc pushed by dkam

main

2025-11-28 08:44:51 +00:00

0s

Add backchannel logout, per application logout.

#63:Commit 6be23c2c37 pushed by dkam

main

2025-11-27 08:12:14 +00:00

0s

Add pairwise SID with a UUIDv4, a significatant upgrade over User.id.to_s. Complete allowing admin to enforce TOTP per user

#62:Commit 7796c38c08 pushed by dkam

main

2025-11-24 02:44:51 +00:00

0s

More complete oidc

#61:Commit e882a4d6d1 pushed by dkam

main

2025-11-19 14:44:51 +00:00

0s

Bump up the forward auth token ttl, fix leaking of error data

#60:Commit 11ec753c68 pushed by dkam

main

2025-11-10 02:44:51 +00:00

0s

Bug fix for domain names with empty string instead of null. Form errors and some security fixes

#59:Commit 4df2eee4d9 pushed by dkam

main

2025-11-09 01:27:59 +00:00

0s

Add pkce

#58:Commit 038801f34b pushed by dkam

main

2025-11-09 01:22:54 +00:00

0s

Fix CSP reporting endpoitn. Fix the SER for CSP

#57:Commit 631b2b53bb pushed by dkam

main

2025-11-05 17:47:55 +00:00

0s

Fix mobile view menu popout. Add an option SENTRY_DSN support, which uses rails event reporting

#56:Commit 6049429a41 pushed by dkam

main

2025-11-04 12:22:22 +00:00

0s

bah

#55:Commit 4f5974dd37 pushed by dkam

main

2025-11-04 12:16:35 +00:00

0s

bug fix

#54:Commit 5de53f1841 pushed by dkam

main

2025-11-04 10:34:15 +00:00

0s

Add some docs

#53:Commit 73b2ae2f02 pushed by dkam

main

2025-11-04 10:21:08 +00:00

0s

Bug updating OIDC apps. Update readme

#52:Commit 4c5ac344bd pushed by dkam

main

2025-11-04 10:13:55 +00:00

0s

Ok - this time add the new controllers we stripped out of inline and add back the csp

#51:Commit 044b9239d6 pushed by dkam

main

2025-11-04 09:14:48 +00:00

0s

Remove unneeded stuff

#50:Commit e9b1995e89 pushed by dkam

main

2025-11-04 07:55:28 +00:00

0s

Fix CSP errors - migrate inline JS to stimulus controllers. Add a URL for applications so users can discover them

#49:Commit bf104a9983 pushed by dkam

main

2025-11-04 07:48:21 +00:00

0s

Fix storing passkeys

#48:Commit ec13dd2b60 pushed by dkam

main

2025-11-04 06:06:59 +00:00

0s

Add webauthn

#47:Commit 57abc0b804 pushed by dkam

main

2025-11-04 05:32:56 +00:00

0s

Move sessions into their own view for easier management

#46:Commit 19bfc21f11 pushed by dkam

main

2025-11-04 05:20:16 +00:00

0s

Massive refactor. Merge forward_auth into App, remove references to unimplemented OIDC federation and SAML features. Add group and user custom claims. Groups now allocate which apps a user can use

#45:Commit ef15db77f9 pushed by dkam

main

2025-11-04 04:19:46 +00:00

0s

Update the .env.example file

#44:Commit 517029247d pushed by dkam

main

2025-10-30 05:47:55 +00:00

0s

More nuanced domain fetching for host validation

#43:Commit bfcc5cdc84 pushed by dkam

main

2025-10-29 05:35:33 +00:00

0s

Add comprhensive csp polices and reporting endpoint. Add environment support require for protecting against rebinding attacks on ip addresses

#42:Commit ddcb297c74 pushed by dkam

main

2025-10-29 05:33:18 +00:00

0s

Rate limit the forward_auth controller

#41:Commit 6f7de94623 pushed by dkam

main

2025-10-29 04:38:01 +00:00

0s

Use the IPAddr library to detect ipv4 and ipv6 addresses

#40:Commit baa75a3456 pushed by dkam

main

2025-10-29 02:55:42 +00:00

0s

Use the IPAddr library to detect ipv4 and ipv6 addresses

#39:Commit 54025917de pushed by dkam

main

2025-10-29 02:52:57 +00:00

0s

Improve finding the requested host's domain for setting the domain cookie

#38:Commit d96a864436 pushed by dkam

main

2025-10-29 02:47:09 +00:00

0s

remove incorrectly named files

#37:Commit a36eb6d1f3 pushed by dkam

main

2025-10-28 23:25:56 +00:00

0s