Dan Milne dd8bd15a76 CSRF issue with API endpoint

2026-01-02 15:29:34 +11:00

..

assets

First commit

2025-10-23 16:19:56 +11:00

channels/application_cable

Add files to support brakeman and standardrb. Fix some SRB warnings

2026-01-01 13:18:30 +11:00

controllers

CSRF issue with API endpoint

2026-01-02 15:29:34 +11:00

helpers

StandardRB fixes

2026-01-01 13:29:44 +11:00

javascript

PKCE is now default enabled. You can now create public / no-secret apps OIDC apps

2025-12-31 09:22:18 +11:00

jobs

StandardRB fixes

2026-01-01 13:29:44 +11:00

mailers

StandardRB fixes

2026-01-01 13:29:44 +11:00

models

Fix webauthn bug. Fix tests. Update docs

2026-01-01 15:24:56 +11:00

services

Return only scopes requested ( OpenID conformance test. Update README

2026-01-02 14:05:54 +11:00

views

Add rails encryption for totp - allow configuration of encryption secrets from env, or derive them from SECRET_KEY_BASE. Don't leak email address via web_authn, rate limit web_authn, escape oidc state value, require password for changing email address, allow settings the hmac secret for token prefix generation

2025-12-31 10:33:56 +11:00