clinch

Fix StandardRB

ci.yml #83:Commit adb789bbea pushed by dkam

main

2026-01-01 02:43:30 +00:00

0s

StandardRB fixes

ci.yml #82:Commit 93a0edb0a2 pushed by dkam

main

2026-01-01 02:35:43 +00:00

0s

Add security-todo and beta-checklists, and some security rake tasks

ci.yml #81:Commit 9234904e47 pushed by dkam

main

2026-01-01 02:29:56 +00:00

0s

Add new claims to the discovery endpoint

ci.yml #80:Commit e36a9a781a pushed by dkam

main

2026-01-01 02:07:02 +00:00

0s

Fixes for tests and AR Encryption

ci.yml #79:Commit 364e6e21dd pushed by dkam

main

2025-12-31 06:27:46 +00:00

0s

Switch Access / Refresh tokens / Auth Code from bcrypt ( and plain ) to hmac. BCrypt is for low entropy passwords and prevents dictionary attacks - HMAC is suitable for 256-bit random data.

ci.yml #78:Commit 3db466f5a2 pushed by dkam

main

2025-12-31 05:08:11 +00:00

0s

Include the hash of the access token in the JWT / ID Token under the key at_hash as per the requirements. Update the discovery endpoint to describe subject_type as 'pairwise', rather than 'public', since we do pairwise subject ids.

ci.yml #77:Commit ed7ceedef5 pushed by dkam

main

2025-12-31 04:48:41 +00:00

0s

Improve the README and remove incorrect claims.

ci.yml #76:Commit 4f31fadc6c pushed by dkam

main

2025-12-31 03:45:47 +00:00

0s

Improve readme and tests

ci.yml #75:Commit 29c0981a59 pushed by dkam

main

2025-12-31 01:17:31 +00:00

0s

Clean up and secure web_authn controller

ci.yml #74:Commit 9d402fcd92 pushed by dkam

main

2025-12-31 00:56:19 +00:00

0s

Version bump

ci.yml #73:Commit 9530c8284f pushed by dkam

main

2025-12-31 00:44:30 +00:00

0s

version bump

ci.yml #72:Commit 32235f9647 pushed by dkam

main

2025-12-30 23:35:37 +00:00

0s

Remove plain text token from everywhere

ci.yml #71:Commit 71d59e7367 pushed by dkam

main

2025-12-30 00:58:38 +00:00

0s

Fix tests. Remove tests which test rails functionality

ci.yml #70:Commit 0761c424c1 pushed by dkam

main

2025-12-30 00:58:18 +00:00

0s

Fix more tests

ci.yml #69:Commit 4c1df53fd5 pushed by dkam

main

2025-12-29 13:18:26 +00:00

0s

Fix forward_auth bugs - including disabled apps still working. Fix forward_auth tests

ci.yml #68:Commit 0361bfe470 pushed by dkam

main

2025-12-29 08:22:17 +00:00

0s

Add permissions initializer and missing image paste controller

ci.yml #67:Commit 898fd69a5d pushed by dkam

main

2025-12-29 04:37:19 +00:00

0s

Remove the rate limit for the forward auth system

ci.yml #66:Commit ab362aabac pushed by dkam

main

2025-12-29 02:27:38 +00:00

0s

Handle empty backchannel logout urls

ci.yml #65:Commit 7af8624bf8 pushed by dkam

main

2025-12-01 14:44:51 +00:00

0s

Add a subdirectory for active storage

ci.yml #64:Commit f8543f98cc pushed by dkam

main

2025-11-28 08:44:51 +00:00

0s

Add backchannel logout, per application logout.

ci.yml #63:Commit 6be23c2c37 pushed by dkam

main

2025-11-27 08:12:14 +00:00

0s

Add pairwise SID with a UUIDv4, a significatant upgrade over User.id.to_s. Complete allowing admin to enforce TOTP per user

ci.yml #62:Commit 7796c38c08 pushed by dkam

main

2025-11-24 02:44:51 +00:00

0s

More complete oidc

ci.yml #61:Commit e882a4d6d1 pushed by dkam

main

2025-11-19 14:44:51 +00:00

0s

Bump up the forward auth token ttl, fix leaking of error data

ci.yml #60:Commit 11ec753c68 pushed by dkam

main

2025-11-10 02:44:51 +00:00

0s

Bug fix for domain names with empty string instead of null. Form errors and some security fixes

ci.yml #59:Commit 4df2eee4d9 pushed by dkam

main

2025-11-09 01:27:59 +00:00

0s

Add pkce

ci.yml #58:Commit 038801f34b pushed by dkam

main

2025-11-09 01:22:54 +00:00

0s

Fix CSP reporting endpoitn. Fix the SER for CSP

ci.yml #57:Commit 631b2b53bb pushed by dkam

main

2025-11-05 17:47:55 +00:00

0s

Fix mobile view menu popout. Add an option SENTRY_DSN support, which uses rails event reporting

ci.yml #56:Commit 6049429a41 pushed by dkam

main

2025-11-04 12:22:22 +00:00

0s

bah

ci.yml #55:Commit 4f5974dd37 pushed by dkam

main

2025-11-04 12:16:35 +00:00

0s

bug fix

ci.yml #54:Commit 5de53f1841 pushed by dkam

main

2025-11-04 10:34:15 +00:00

0s