Dan Milne
|
444ae6291c
|
Add missing files, fix formatting
CI / scan_ruby (push) Has been cancelled
CI / scan_js (push) Has been cancelled
CI / scan_container (push) Has been cancelled
CI / lint (push) Has been cancelled
CI / test (push) Has been cancelled
CI / system-test (push) Has been cancelled
|
2026-01-05 23:34:11 +11:00 |
|
Dan Milne
|
233fb723d5
|
More accurate language around passing the OpenID Conformance tests
CI / scan_ruby (push) Has been cancelled
CI / scan_js (push) Has been cancelled
CI / scan_container (push) Has been cancelled
CI / lint (push) Has been cancelled
CI / test (push) Has been cancelled
CI / system-test (push) Has been cancelled
|
2026-01-05 23:32:34 +11:00 |
|
Dan Milne
|
cc6d4fcc65
|
Add test files, update checklist
CI / scan_ruby (push) Has been cancelled
CI / scan_js (push) Has been cancelled
CI / scan_container (push) Has been cancelled
CI / lint (push) Has been cancelled
CI / test (push) Has been cancelled
CI / system-test (push) Has been cancelled
|
2026-01-05 23:28:55 +11:00 |
|
Dan Milne
|
5268f10eb3
|
Don't allow claim escalation
CI / scan_ruby (push) Has been cancelled
CI / scan_js (push) Has been cancelled
CI / scan_container (push) Has been cancelled
CI / lint (push) Has been cancelled
CI / test (push) Has been cancelled
CI / system-test (push) Has been cancelled
|
2026-01-05 16:40:11 +11:00 |
|
Dan Milne
|
5c5662eaab
|
Expose 'username' via forward auth headers
|
2026-01-05 15:12:24 +11:00 |
|
Dan Milne
|
27d77ebf47
|
Expose 'username' via forward auth headers
|
2026-01-05 15:12:02 +11:00 |
|
Dan Milne
|
ba08158c85
|
Bug fix for background jobs
|
2026-01-05 14:43:06 +11:00 |
|
Dan Milne
|
a6480b0860
|
Verion Bump
CI / scan_ruby (push) Has been cancelled
CI / scan_js (push) Has been cancelled
CI / scan_container (push) Has been cancelled
CI / lint (push) Has been cancelled
CI / test (push) Has been cancelled
CI / system-test (push) Has been cancelled
|
2026-01-05 13:08:22 +11:00 |
|
Dan Milne
|
75cc223329
|
303 is the correct response
|
2026-01-05 13:05:24 +11:00 |
|
Dan Milne
|
46ae65f4d2
|
Move the 'remove_query_param' to the application controller
|
2026-01-05 13:03:03 +11:00 |
|
Dan Milne
|
95d0d844e9
|
Add a method to remove parameters from urls, so we can redirect without risk of infinite redirect. Fix a bunch of redirects to login afer being foced to log out. Add missing migrations
|
2026-01-05 13:01:32 +11:00 |
|
Dan Milne
|
524a7719c3
|
Merge branch 'main' into feature/claims
|
2026-01-05 12:11:53 +11:00 |
|
Dan Milne
|
8110d547dd
|
Fix bug with session deletion when logout forced and we have a redirect to follow
|
2026-01-05 12:11:52 +11:00 |
|
Dan Milne
|
25e1043312
|
Add skip-consent, correctly use 303, rather than 302, actually rename per app 'logout' to 'require re-auth'. Add helper methods for token lifetime - allowing 10d for 10days for example.
|
2026-01-05 12:03:01 +11:00 |
|
Dan Milne
|
074a734c0c
|
Accidentally added skip-consent to this branch
|
2026-01-05 12:01:04 +11:00 |
|
Dan Milne
|
4a48012a82
|
Add claims support
|
2026-01-05 12:00:29 +11:00 |
|
Dan Milne
|
e631f606e7
|
Better error messages
CI / scan_ruby (push) Has been cancelled
CI / scan_js (push) Has been cancelled
CI / scan_container (push) Has been cancelled
CI / lint (push) Has been cancelled
CI / test (push) Has been cancelled
CI / system-test (push) Has been cancelled
0.8.6
|
2026-01-03 12:29:27 +11:00 |
|
Dan Milne
|
f4a697ae9b
|
More OpenID Conformance test fixes - work with POST, correct auth code character set, correct no-store cache headers
|
2026-01-03 12:28:43 +11:00 |
|
Dan Milne
|
16e34ffaf0
|
Updates for oidc conformance
|
2026-01-03 10:11:10 +11:00 |
|
Dan Milne
|
0bb84f08d6
|
OpenID conformance test: we get a warning for not having a value for every claim. But we can explictly list support claims. Nothing we can do about a warning in the complience.
CI / scan_ruby (push) Has been cancelled
CI / scan_js (push) Has been cancelled
CI / scan_container (push) Has been cancelled
CI / lint (push) Has been cancelled
CI / test (push) Has been cancelled
CI / system-test (push) Has been cancelled
2026.01
|
2026-01-02 16:35:12 +11:00 |
|
Dan Milne
|
182682024d
|
OpenID Conformance: Include all required scopes when profile is requested, even if they're empty
CI / scan_ruby (push) Has been cancelled
CI / scan_js (push) Has been cancelled
CI / scan_container (push) Has been cancelled
CI / lint (push) Has been cancelled
CI / test (push) Has been cancelled
CI / system-test (push) Has been cancelled
|
2026-01-02 15:47:40 +11:00 |
|
Dan Milne
|
b517ebe809
|
OpenID conformance test: Allow posting the access token in the body for userinfo endpoint
CI / scan_ruby (push) Has been cancelled
CI / scan_js (push) Has been cancelled
CI / scan_container (push) Has been cancelled
CI / lint (push) Has been cancelled
CI / test (push) Has been cancelled
CI / system-test (push) Has been cancelled
|
2026-01-02 15:41:07 +11:00 |
|
Dan Milne
|
dd8bd15a76
|
CSRF issue with API endpoint
CI / scan_ruby (push) Has been cancelled
CI / scan_js (push) Has been cancelled
CI / scan_container (push) Has been cancelled
CI / lint (push) Has been cancelled
CI / test (push) Has been cancelled
CI / system-test (push) Has been cancelled
|
2026-01-02 15:29:34 +11:00 |
|
Dan Milne
|
f67a73821c
|
OpenID Conformance: user info endpoint should support get and post requets, not just get
CI / scan_ruby (push) Has been cancelled
CI / scan_js (push) Has been cancelled
CI / scan_container (push) Has been cancelled
CI / lint (push) Has been cancelled
CI / test (push) Has been cancelled
CI / system-test (push) Has been cancelled
|
2026-01-02 15:26:39 +11:00 |
|
Dan Milne
|
b09ddf6db5
|
OpenID Conformance: We need to return to the redirect_uri in the case of errors.
CI / scan_ruby (push) Has been cancelled
CI / scan_js (push) Has been cancelled
CI / scan_container (push) Has been cancelled
CI / lint (push) Has been cancelled
CI / test (push) Has been cancelled
CI / system-test (push) Has been cancelled
|
2026-01-02 15:12:55 +11:00 |
|
Dan Milne
|
abbb11a41d
|
Return only scopes requested, add tests ( OpenID conformance test )
CI / scan_ruby (push) Has been cancelled
CI / scan_js (push) Has been cancelled
CI / scan_container (push) Has been cancelled
CI / lint (push) Has been cancelled
CI / test (push) Has been cancelled
CI / system-test (push) Has been cancelled
|
2026-01-02 14:55:06 +11:00 |
|
Dan Milne
|
b2030df8c2
|
Return only scopes requested ( OpenID conformance test. Update README
|
2026-01-02 14:05:54 +11:00 |
|
Dan Milne
|
07cddf5823
|
Version bump
CI / scan_ruby (push) Has been cancelled
CI / scan_js (push) Has been cancelled
CI / scan_container (push) Has been cancelled
CI / lint (push) Has been cancelled
CI / test (push) Has been cancelled
CI / system-test (push) Has been cancelled
|
2026-01-02 12:57:28 +11:00 |
|
Dan Milne
|
46aa983189
|
Don't use secret scanner for trivy - github already does it and it's hard to ignore the test key
CI / scan_ruby (push) Has been cancelled
CI / scan_js (push) Has been cancelled
CI / scan_container (push) Has been cancelled
CI / lint (push) Has been cancelled
CI / test (push) Has been cancelled
CI / system-test (push) Has been cancelled
|
2026-01-02 12:56:03 +11:00 |
|
Dan Milne
|
d0d79ee1da
|
Try ignore capybara's test tripping trivy
CI / scan_ruby (push) Has been cancelled
CI / scan_js (push) Has been cancelled
CI / scan_container (push) Has been cancelled
CI / lint (push) Has been cancelled
CI / test (push) Has been cancelled
CI / system-test (push) Has been cancelled
|
2026-01-02 12:52:24 +11:00 |
|
Dan Milne
|
2f6a2c7406
|
Update ruby 3.4.6 -> 3.4.7. Update gems. Add trivy scanning and ignore unfixable Debian CVEs. Ignore a test fixture key for Capybara
CI / scan_ruby (push) Has been cancelled
CI / scan_js (push) Has been cancelled
CI / scan_container (push) Has been cancelled
CI / lint (push) Has been cancelled
CI / test (push) Has been cancelled
CI / system-test (push) Has been cancelled
|
2026-01-02 12:48:40 +11:00 |
|
Dan Milne
|
5137a25626
|
Add remainging rate limits. Add docker compose production example. Update beta-checklist.
CI / scan_ruby (push) Has been cancelled
CI / scan_js (push) Has been cancelled
CI / lint (push) Has been cancelled
CI / test (push) Has been cancelled
CI / system-test (push) Has been cancelled
|
2026-01-02 12:14:13 +11:00 |
|
Dan Milne
|
fed7c3cedb
|
Some beta-checklist updates
|
2026-01-02 11:53:41 +11:00 |
|
Dan Milne
|
e288fcad7c
|
Remove old docs
|
2026-01-01 21:04:26 +11:00 |
|
Dan Milne
|
c1c6e0112e
|
ADd backup / restore documentation
CI / scan_ruby (push) Has been cancelled
CI / scan_js (push) Has been cancelled
CI / lint (push) Has been cancelled
CI / test (push) Has been cancelled
CI / system-test (push) Has been cancelled
|
2026-01-01 15:40:49 +11:00 |
|
Dan Milne
|
7f834fb7fa
|
Version bump
|
2026-01-01 15:27:19 +11:00 |
|
Dan Milne
|
ae99d3d9cf
|
Fix webauthn bug. Fix tests. Update docs
CI / scan_ruby (push) Has been cancelled
CI / scan_js (push) Has been cancelled
CI / lint (push) Has been cancelled
CI / test (push) Has been cancelled
CI / system-test (push) Has been cancelled
|
2026-01-01 15:24:56 +11:00 |
|
Dan Milne
|
1afcd041f9
|
Update README, fix a test
|
2026-01-01 15:17:28 +11:00 |
|
Dan Milne
|
71198340d0
|
fix tests and add a Claude.md file
CI / scan_ruby (push) Has been cancelled
CI / scan_js (push) Has been cancelled
CI / lint (push) Has been cancelled
CI / test (push) Has been cancelled
CI / system-test (push) Has been cancelled
|
2026-01-01 15:11:46 +11:00 |
|
Dan Milne
|
d597ca8810
|
Fix tests
|
2026-01-01 14:52:24 +11:00 |
|
Dan Milne
|
9b81aee490
|
Fix linting error
CI / scan_ruby (push) Has been cancelled
CI / scan_js (push) Has been cancelled
CI / lint (push) Has been cancelled
CI / test (push) Has been cancelled
CI / system-test (push) Has been cancelled
|
2026-01-01 13:45:10 +11:00 |
|
Dan Milne
|
265518ab25
|
Move integration tests into right directory
CI / scan_ruby (push) Has been cancelled
CI / scan_js (push) Has been cancelled
CI / lint (push) Has been cancelled
CI / test (push) Has been cancelled
CI / system-test (push) Has been cancelled
|
2026-01-01 13:43:13 +11:00 |
|
Dan Milne
|
adb789bbea
|
Fix StandardRB
CI / scan_ruby (push) Has been cancelled
CI / scan_js (push) Has been cancelled
CI / lint (push) Has been cancelled
CI / test (push) Has been cancelled
CI / system-test (push) Has been cancelled
|
2026-01-01 13:35:37 +11:00 |
|
Dan Milne
|
93a0edb0a2
|
StandardRB fixes
CI / scan_ruby (push) Has been cancelled
CI / scan_js (push) Has been cancelled
CI / lint (push) Has been cancelled
CI / test (push) Has been cancelled
CI / system-test (push) Has been cancelled
|
2026-01-01 13:29:44 +11:00 |
|
Dan Milne
|
7d3af2bcec
|
SRB fixes
|
2026-01-01 13:19:17 +11:00 |
|
Dan Milne
|
c03034c49f
|
Add files to support brakeman and standardrb. Fix some SRB warnings
|
2026-01-01 13:18:30 +11:00 |
|
Dan Milne
|
9234904e47
|
Add security-todo and beta-checklists, and some security rake tasks
CI / scan_ruby (push) Has been cancelled
CI / scan_js (push) Has been cancelled
CI / lint (push) Has been cancelled
CI / test (push) Has been cancelled
CI / system-test (push) Has been cancelled
|
2026-01-01 13:06:54 +11:00 |
|
Dan Milne
|
e36a9a781a
|
Add new claims to the discovery endpoint
CI / scan_ruby (push) Has been cancelled
CI / scan_js (push) Has been cancelled
CI / lint (push) Has been cancelled
CI / test (push) Has been cancelled
CI / system-test (push) Has been cancelled
|
2025-12-31 17:27:28 +11:00 |
|
Dan Milne
|
d036e25fef
|
Add auth_time, acr and azp support for OIDC claims
|
2025-12-31 17:07:54 +11:00 |
|
Dan Milne
|
fcdd2b6de7
|
Continue adding auth_time - need it in the refresh token too, so we can accurately create new access tokens.
|
2025-12-31 16:57:28 +11:00 |
|