clinch

CI #79:Commit 364e6e21dd pushed by dkam

main

2025-12-31 06:27:46 +00:00

0s

Switch Access / Refresh tokens / Auth Code from bcrypt ( and plain ) to hmac. BCrypt is for low entropy passwords and prevents dictionary attacks - HMAC is suitable for 256-bit random data.

CI #78:Commit 3db466f5a2 pushed by dkam

main

2025-12-31 05:08:11 +00:00

0s

Include the hash of the access token in the JWT / ID Token under the key at_hash as per the requirements. Update the discovery endpoint to describe subject_type as 'pairwise', rather than 'public', since we do pairwise subject ids.

CI #77:Commit ed7ceedef5 pushed by dkam

main

2025-12-31 04:48:41 +00:00

0s

Improve the README and remove incorrect claims.

CI #76:Commit 4f31fadc6c pushed by dkam

main

2025-12-31 03:45:47 +00:00

0s

Improve readme and tests

CI #75:Commit 29c0981a59 pushed by dkam

main

2025-12-31 01:17:31 +00:00

0s

Clean up and secure web_authn controller

CI #74:Commit 9d402fcd92 pushed by dkam

main

2025-12-31 00:56:19 +00:00

0s

Version bump

CI #73:Commit 9530c8284f pushed by dkam

main

2025-12-31 00:44:30 +00:00

0s

version bump

CI #72:Commit 32235f9647 pushed by dkam

main

2025-12-30 23:35:37 +00:00

0s

Remove plain text token from everywhere

CI #71:Commit 71d59e7367 pushed by dkam

main

2025-12-30 00:58:38 +00:00

0s

Fix tests. Remove tests which test rails functionality

CI #70:Commit 0761c424c1 pushed by dkam

main

2025-12-30 00:58:18 +00:00

0s

Fix more tests

CI #69:Commit 4c1df53fd5 pushed by dkam

main

2025-12-29 13:18:26 +00:00

0s

Fix forward_auth bugs - including disabled apps still working. Fix forward_auth tests

CI #68:Commit 0361bfe470 pushed by dkam

main

2025-12-29 08:22:17 +00:00

0s

Add permissions initializer and missing image paste controller

CI #67:Commit 898fd69a5d pushed by dkam

main

2025-12-29 04:37:19 +00:00

0s

Remove the rate limit for the forward auth system

CI #66:Commit ab362aabac pushed by dkam

main

2025-12-29 02:27:38 +00:00

0s

Handle empty backchannel logout urls

CI #65:Commit 7af8624bf8 pushed by dkam

main

2025-12-01 14:44:51 +00:00

0s

Add a subdirectory for active storage

CI #64:Commit f8543f98cc pushed by dkam

main

2025-11-28 08:44:51 +00:00

0s

Add backchannel logout, per application logout.

CI #63:Commit 6be23c2c37 pushed by dkam

main

2025-11-27 08:12:14 +00:00

0s

Add pairwise SID with a UUIDv4, a significatant upgrade over User.id.to_s. Complete allowing admin to enforce TOTP per user

CI #62:Commit 7796c38c08 pushed by dkam

main

2025-11-24 02:44:51 +00:00

0s

More complete oidc

CI #61:Commit e882a4d6d1 pushed by dkam

main

2025-11-19 14:44:51 +00:00

0s

Bump up the forward auth token ttl, fix leaking of error data

CI #60:Commit 11ec753c68 pushed by dkam

main

2025-11-10 02:44:51 +00:00

0s

Bug fix for domain names with empty string instead of null. Form errors and some security fixes

CI #59:Commit 4df2eee4d9 pushed by dkam

main

2025-11-09 01:27:59 +00:00

0s

Add pkce

CI #58:Commit 038801f34b pushed by dkam

main

2025-11-09 01:22:54 +00:00

0s

Fix CSP reporting endpoitn. Fix the SER for CSP

CI #57:Commit 631b2b53bb pushed by dkam

main

2025-11-05 17:47:55 +00:00

0s

Fix mobile view menu popout. Add an option SENTRY_DSN support, which uses rails event reporting

CI #56:Commit 6049429a41 pushed by dkam

main

2025-11-04 12:22:22 +00:00

0s

bah

CI #55:Commit 4f5974dd37 pushed by dkam

main

2025-11-04 12:16:35 +00:00

0s

bug fix

CI #54:Commit 5de53f1841 pushed by dkam

main

2025-11-04 10:34:15 +00:00

0s

Add some docs

CI #53:Commit 73b2ae2f02 pushed by dkam

main

2025-11-04 10:21:08 +00:00

0s

Bug updating OIDC apps. Update readme

CI #52:Commit 4c5ac344bd pushed by dkam

main

2025-11-04 10:13:55 +00:00

0s

Ok - this time add the new controllers we stripped out of inline and add back the csp

CI #51:Commit 044b9239d6 pushed by dkam

main

2025-11-04 09:14:48 +00:00

0s

Remove unneeded stuff

CI #50:Commit e9b1995e89 pushed by dkam

main

2025-11-04 07:55:28 +00:00

0s