Dan Milne 25e1043312 Add skip-consent, correctly use 303, rather than 302, actually rename per app 'logout' to 'require re-auth'. Add helper methods for token lifetime - allowing 10d for 10days for example.

2026-01-05 12:03:01 +11:00

..

assets

First commit

2025-10-23 16:19:56 +11:00

channels/application_cable

Add files to support brakeman and standardrb. Fix some SRB warnings

2026-01-01 13:18:30 +11:00

controllers

Add skip-consent, correctly use 303, rather than 302, actually rename per app 'logout' to 'require re-auth'. Add helper methods for token lifetime - allowing 10d for 10days for example.

2026-01-05 12:03:01 +11:00

helpers

StandardRB fixes

2026-01-01 13:29:44 +11:00

javascript

PKCE is now default enabled. You can now create public / no-secret apps OIDC apps

2025-12-31 09:22:18 +11:00

jobs

StandardRB fixes

2026-01-01 13:29:44 +11:00

mailers

StandardRB fixes

2026-01-01 13:29:44 +11:00

models

Add skip-consent, correctly use 303, rather than 302, actually rename per app 'logout' to 'require re-auth'. Add helper methods for token lifetime - allowing 10d for 10days for example.

2026-01-05 12:03:01 +11:00

services

OpenID conformance test: we get a warning for not having a value for every claim. But we can explictly list support claims. Nothing we can do about a warning in the complience.

2026-01-02 16:35:12 +11:00

views

Add skip-consent, correctly use 303, rather than 302, actually rename per app 'logout' to 'require re-auth'. Add helper methods for token lifetime - allowing 10d for 10days for example.

2026-01-05 12:03:01 +11:00