Dan Milne 5c5662eaab Expose 'username' via forward auth headers

2026-01-05 15:12:24 +11:00

..

active_sessions

Move sessions into their own view for easier management

2025-11-04 15:19:39 +11:00

admin

Expose 'username' via forward auth headers

2026-01-05 15:12:24 +11:00

dashboard

Add skip-consent, correctly use 303, rather than 302, actually rename per app 'logout' to 'require re-auth'. Add helper methods for token lifetime - allowing 10d for 10days for example.

2026-01-05 12:03:01 +11:00

invitations

Bug fix

2025-10-28 08:27:19 +11:00

invitations_mailer

Refactor email delivery and background jobs system

2025-10-26 16:30:02 +11:00

layouts

Fix mobile view menu popout. Add an option SENTRY_DSN support, which uses rails event reporting

2025-11-04 23:16:28 +11:00

oidc

Add backchannel logout, per application logout.

2025-11-27 16:38:27 +11:00

passwords

Consolidate all the error messages - add some stimulus controller.

2025-11-07 16:58:28 +11:00

passwords_mailer

First crack

2025-10-23 16:45:00 +11:00

profiles

Add rails encryption for totp - allow configuration of encryption secrets from env, or derive them from SECRET_KEY_BASE. Don't leak email address via web_authn, rate limit web_authn, escape oidc state value, require password for changing email address, allow settings the hmac secret for token prefix generation

2025-12-31 10:33:56 +11:00

pwa

First commit

2025-10-23 16:19:56 +11:00

sessions

Updates for oidc conformance

2026-01-03 10:11:10 +11:00

shared

PKCE is now default enabled. You can now create public / no-secret apps OIDC apps

2025-12-31 09:22:18 +11:00

totp

Add pairwise SID with a UUIDv4, a significatant upgrade over User.id.to_s. Complete allowing admin to enforce TOTP per user

2025-11-23 11:16:06 +11:00

users

Consolidate all the error messages - add some stimulus controller.

2025-11-07 16:58:28 +11:00