clinch

Add missing files, fix formatting

#106:Commit 444ae6291c pushed by dkam

main

2026-01-06 14:44:51 +00:00

0s

More accurate language around passing the OpenID Conformance tests

#105:Commit 233fb723d5 pushed by dkam

main

2026-01-05 12:34:23 +00:00

0s

Add test files, update checklist

#104:Commit cc6d4fcc65 pushed by dkam

main

2026-01-05 12:32:44 +00:00

0s

Don't allow claim escalation

#103:Commit 5268f10eb3 pushed by dkam

main

2026-01-05 12:29:05 +00:00

0s

Verion Bump

#102:Commit a6480b0860 pushed by dkam

main

2026-01-05 05:40:17 +00:00

0s

Better error messages

#101:Commit e631f606e7 pushed by dkam

main

2026-01-05 02:08:28 +00:00

0s

OpenID conformance test: we get a warning for not having a value for every claim. But we can explictly list support claims. Nothing we can do about a warning in the complience.

#100:Commit 0bb84f08d6 pushed by dkam

main

2026-01-03 08:44:51 +00:00

0s

OpenID Conformance: Include all required scopes when profile is requested, even if they're empty

#99:Commit 182682024d pushed by dkam

main

2026-01-02 05:36:15 +00:00

0s

OpenID conformance test: Allow posting the access token in the body for userinfo endpoint

#98:Commit b517ebe809 pushed by dkam

main

2026-01-02 04:47:51 +00:00

0s

CSRF issue with API endpoint

#97:Commit dd8bd15a76 pushed by dkam

main

2026-01-02 04:41:18 +00:00

0s

OpenID Conformance: user info endpoint should support get and post requets, not just get

#96:Commit f67a73821c pushed by dkam

main

2026-01-02 04:29:44 +00:00

0s

OpenID Conformance: We need to return to the redirect_uri in the case of errors.

#95:Commit b09ddf6db5 pushed by dkam

main

2026-01-02 04:26:49 +00:00

0s

Return only scopes requested, add tests ( OpenID conformance test )

#94:Commit abbb11a41d pushed by dkam

main

2026-01-02 04:13:16 +00:00

0s

Version bump

#93:Commit 07cddf5823 pushed by dkam

main

2026-01-02 03:55:20 +00:00

0s

Don't use secret scanner for trivy - github already does it and it's hard to ignore the test key

#92:Commit 46aa983189 pushed by dkam

main

2026-01-02 01:57:45 +00:00

0s

Try ignore capybara's test tripping trivy

#91:Commit d0d79ee1da pushed by dkam

main

2026-01-02 01:57:09 +00:00

0s

Update ruby 3.4.6 -> 3.4.7. Update gems. Add trivy scanning and ignore unfixable Debian CVEs. Ignore a test fixture key for Capybara

#90:Commit 2f6a2c7406 pushed by dkam

main

2026-01-02 01:52:34 +00:00

0s

Add remainging rate limits. Add docker compose production example. Update beta-checklist.

#89:Commit 5137a25626 pushed by dkam

main

2026-01-02 01:48:49 +00:00

0s

ADd backup / restore documentation

#88:Commit c1c6e0112e pushed by dkam

main

2026-01-02 01:14:23 +00:00

0s

Fix webauthn bug. Fix tests. Update docs

#87:Commit ae99d3d9cf pushed by dkam

main

2026-01-01 04:40:55 +00:00

0s

fix tests and add a Claude.md file

#86:Commit 71198340d0 pushed by dkam

main

2026-01-01 04:25:02 +00:00

0s

Fix linting error

#85:Commit 9b81aee490 pushed by dkam

main

2026-01-01 04:12:02 +00:00

0s

Move integration tests into right directory

#84:Commit 265518ab25 pushed by dkam

main

2026-01-01 02:45:18 +00:00

0s

Fix StandardRB

#83:Commit adb789bbea pushed by dkam

main

2026-01-01 02:43:30 +00:00

0s

StandardRB fixes

#82:Commit 93a0edb0a2 pushed by dkam

main

2026-01-01 02:35:43 +00:00

0s

Add security-todo and beta-checklists, and some security rake tasks

#81:Commit 9234904e47 pushed by dkam

main

2026-01-01 02:29:56 +00:00

0s

Add new claims to the discovery endpoint

#80:Commit e36a9a781a pushed by dkam

main

2026-01-01 02:07:02 +00:00

0s

Fixes for tests and AR Encryption

#79:Commit 364e6e21dd pushed by dkam

main

2025-12-31 06:27:46 +00:00

0s

Switch Access / Refresh tokens / Auth Code from bcrypt ( and plain ) to hmac. BCrypt is for low entropy passwords and prevents dictionary attacks - HMAC is suitable for 256-bit random data.

#78:Commit 3db466f5a2 pushed by dkam

main

2025-12-31 05:08:11 +00:00

0s

Include the hash of the access token in the JWT / ID Token under the key at_hash as per the requirements. Update the discovery endpoint to describe subject_type as 'pairwise', rather than 'public', since we do pairwise subject ids.

#77:Commit ed7ceedef5 pushed by dkam

main

2025-12-31 04:48:41 +00:00

0s