clinch

More accurate language around passing the OpenID Conformance tests

ci.yml #105:Commit 233fb723d5 pushed by dkam

main

2026-01-05 12:34:23 +00:00

0s

Add test files, update checklist

ci.yml #104:Commit cc6d4fcc65 pushed by dkam

main

2026-01-05 12:32:44 +00:00

0s

Don't allow claim escalation

ci.yml #103:Commit 5268f10eb3 pushed by dkam

main

2026-01-05 12:29:05 +00:00

0s

Verion Bump

ci.yml #102:Commit a6480b0860 pushed by dkam

main

2026-01-05 05:40:17 +00:00

0s

Better error messages

ci.yml #101:Commit e631f606e7 pushed by dkam

main

2026-01-05 02:08:28 +00:00

0s

OpenID conformance test: we get a warning for not having a value for every claim. But we can explictly list support claims. Nothing we can do about a warning in the complience.

ci.yml #100:Commit 0bb84f08d6 pushed by dkam

main

2026-01-03 08:44:51 +00:00

0s

OpenID Conformance: Include all required scopes when profile is requested, even if they're empty

ci.yml #99:Commit 182682024d pushed by dkam

main

2026-01-02 05:36:15 +00:00

0s

OpenID conformance test: Allow posting the access token in the body for userinfo endpoint

ci.yml #98:Commit b517ebe809 pushed by dkam

main

2026-01-02 04:47:51 +00:00

0s

CSRF issue with API endpoint

ci.yml #97:Commit dd8bd15a76 pushed by dkam

main

2026-01-02 04:41:18 +00:00

0s

OpenID Conformance: user info endpoint should support get and post requets, not just get

ci.yml #96:Commit f67a73821c pushed by dkam

main

2026-01-02 04:29:44 +00:00

0s

OpenID Conformance: We need to return to the redirect_uri in the case of errors.

ci.yml #95:Commit b09ddf6db5 pushed by dkam

main

2026-01-02 04:26:49 +00:00

0s

Return only scopes requested, add tests ( OpenID conformance test )

ci.yml #94:Commit abbb11a41d pushed by dkam

main

2026-01-02 04:13:16 +00:00

0s

Version bump

ci.yml #93:Commit 07cddf5823 pushed by dkam

main

2026-01-02 03:55:20 +00:00

0s

Don't use secret scanner for trivy - github already does it and it's hard to ignore the test key

ci.yml #92:Commit 46aa983189 pushed by dkam

main

2026-01-02 01:57:45 +00:00

0s

Try ignore capybara's test tripping trivy

ci.yml #91:Commit d0d79ee1da pushed by dkam

main

2026-01-02 01:57:09 +00:00

0s

Update ruby 3.4.6 -> 3.4.7. Update gems. Add trivy scanning and ignore unfixable Debian CVEs. Ignore a test fixture key for Capybara

ci.yml #90:Commit 2f6a2c7406 pushed by dkam

main

2026-01-02 01:52:34 +00:00

0s

Add remainging rate limits. Add docker compose production example. Update beta-checklist.

ci.yml #89:Commit 5137a25626 pushed by dkam

main

2026-01-02 01:48:49 +00:00

0s

ADd backup / restore documentation

ci.yml #88:Commit c1c6e0112e pushed by dkam

main

2026-01-02 01:14:23 +00:00

0s

Fix webauthn bug. Fix tests. Update docs

ci.yml #87:Commit ae99d3d9cf pushed by dkam

main

2026-01-01 04:40:55 +00:00

0s

fix tests and add a Claude.md file

ci.yml #86:Commit 71198340d0 pushed by dkam

main

2026-01-01 04:25:02 +00:00

0s

Fix linting error

ci.yml #85:Commit 9b81aee490 pushed by dkam

main

2026-01-01 04:12:02 +00:00

0s

Move integration tests into right directory

ci.yml #84:Commit 265518ab25 pushed by dkam

main

2026-01-01 02:45:18 +00:00

0s

Fix StandardRB

ci.yml #83:Commit adb789bbea pushed by dkam

main

2026-01-01 02:43:30 +00:00

0s

StandardRB fixes

ci.yml #82:Commit 93a0edb0a2 pushed by dkam

main

2026-01-01 02:35:43 +00:00

0s

Add security-todo and beta-checklists, and some security rake tasks

ci.yml #81:Commit 9234904e47 pushed by dkam

main

2026-01-01 02:29:56 +00:00

0s

Add new claims to the discovery endpoint

ci.yml #80:Commit e36a9a781a pushed by dkam

main

2026-01-01 02:07:02 +00:00

0s

Fixes for tests and AR Encryption

ci.yml #79:Commit 364e6e21dd pushed by dkam

main

2025-12-31 06:27:46 +00:00

0s

Switch Access / Refresh tokens / Auth Code from bcrypt ( and plain ) to hmac. BCrypt is for low entropy passwords and prevents dictionary attacks - HMAC is suitable for 256-bit random data.

ci.yml #78:Commit 3db466f5a2 pushed by dkam

main

2025-12-31 05:08:11 +00:00

0s

Include the hash of the access token in the JWT / ID Token under the key at_hash as per the requirements. Update the discovery endpoint to describe subject_type as 'pairwise', rather than 'public', since we do pairwise subject ids.

ci.yml #77:Commit ed7ceedef5 pushed by dkam

main

2025-12-31 04:48:41 +00:00

0s

Improve the README and remove incorrect claims.

ci.yml #76:Commit 4f31fadc6c pushed by dkam

main

2025-12-31 03:45:47 +00:00

0s