3860 Commits

Author SHA1 Message Date
Nicolas Frati 8d70ad8647 Merge pull request #5 from netbirdio/fix/groups-migration
fix(sql): handle SQLite text password groups
2026-05-12 13:07:16 +02:00
jnfrati a1d4a044de fix(sql): handle SQLite text password groups 2026-05-12 11:02:14 +02:00
Nicolas Frati a0c6b40ff9 Merge pull request #3 from netbirdio/fix/implement-id-token-hint-rp-logout
Fix/implement id token hint rp logout
2026-04-15 16:58:16 +02:00
jnfrati d493d44cbb fix: implement id token hint on rp initiated logout
Signed-off-by: jnfrati <nicofrati@gmail.com>
2026-04-13 19:25:51 +02:00
dependabot[bot] 6f78bb69a7 build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 (#4741)
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 7.0.0 to 7.0.1.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/bbbca2ddaa5d8feaa63e36b76fdaad77386f024f...043fb46d1a93c77aae656e7c1c64a875d1fc6a0a)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-version: 7.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-13 11:37:41 +02:00
dependabot[bot] bdfac38a0f build(deps): bump docker/build-push-action from 7.0.0 to 7.1.0 (#4740)
Bumps [docker/build-push-action](https://github.com/docker/build-push-action) from 7.0.0 to 7.1.0.
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](https://github.com/docker/build-push-action/compare/d08e5c354a6adb9ed34480a06d141179aa583294...bcafcacb16a39f128d818304e6c9c0c18556b85f)

---
updated-dependencies:
- dependency-name: docker/build-push-action
  dependency-version: 7.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-13 11:25:04 +02:00
dependabot[bot] 410a58f5ac build(deps): bump github.com/go-webauthn/webauthn from 0.16.3 to 0.16.4 (#4736)
Bumps [github.com/go-webauthn/webauthn](https://github.com/go-webauthn/webauthn) from 0.16.3 to 0.16.4.
- [Release notes](https://github.com/go-webauthn/webauthn/releases)
- [Changelog](https://github.com/go-webauthn/webauthn/blob/master/CHANGELOG.md)
- [Commits](https://github.com/go-webauthn/webauthn/compare/v0.16.3...v0.16.4)

---
updated-dependencies:
- dependency-name: github.com/go-webauthn/webauthn
  dependency-version: 0.16.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-10 16:23:52 +02:00
Mathias Gebbe eec8f76742 feat(microsoft): map userPrincipalName to preferred_username claim (#4725)
Signed-off-by: Mathias Gebbe <mathias.gebbe@gmail.com>
2026-04-10 16:23:32 +02:00
dependabot[bot] f49dddc8d7 build(deps): bump golang.org/x/net from 0.52.0 to 0.53.0 (#4738)
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.52.0 to 0.53.0.
- [Commits](https://github.com/golang/net/compare/v0.52.0...v0.53.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-version: 0.53.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-10 16:20:18 +02:00
dependabot[bot] 0e0b9364c2 build(deps): bump github.com/mattn/go-sqlite3 from 1.14.41 to 1.14.42 (#4732)
Bumps [github.com/mattn/go-sqlite3](https://github.com/mattn/go-sqlite3) from 1.14.41 to 1.14.42.
- [Release notes](https://github.com/mattn/go-sqlite3/releases)
- [Commits](https://github.com/mattn/go-sqlite3/compare/v1.14.41...v1.14.42)

---
updated-dependencies:
- dependency-name: github.com/mattn/go-sqlite3
  dependency-version: 1.14.42
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-09 06:46:13 +02:00
dependabot[bot] 066f34c07a build(deps): bump github.com/google/cel-go from 0.27.0 to 0.28.0 (#4733)
Bumps [github.com/google/cel-go](https://github.com/google/cel-go) from 0.27.0 to 0.28.0.
- [Release notes](https://github.com/google/cel-go/releases)
- [Commits](https://github.com/google/cel-go/compare/v0.27.0...v0.28.0)

---
updated-dependencies:
- dependency-name: github.com/google/cel-go
  dependency-version: 0.28.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-09 06:45:56 +02:00
Maksim Nabokikh 683d1eeb27 feat: Add more tests for sessions and edge cases (#4731)
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com>
2026-04-08 19:30:06 +02:00
maksim.nabokikh ae0c5c0e03 Fix linter
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com>
2026-04-08 18:16:48 +02:00
maksim.nabokikh 6189b2085b Fix nonce comparison to prevent timing
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com>
2026-04-08 17:57:07 +02:00
maksim.nabokikh 2fb5d78ab7 feat: Add more tests for sessions and edge case
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com>
2026-04-08 17:35:37 +02:00
dependabot[bot] 95fefb46b2 build(deps): bump github.com/coreos/go-oidc/v3 in /examples (#4730)
Bumps [github.com/coreos/go-oidc/v3](https://github.com/coreos/go-oidc) from 3.17.0 to 3.18.0.
- [Release notes](https://github.com/coreos/go-oidc/releases)
- [Commits](https://github.com/coreos/go-oidc/compare/v3.17.0...v3.18.0)

---
updated-dependencies:
- dependency-name: github.com/coreos/go-oidc/v3
  dependency-version: 3.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-08 15:29:45 +02:00
Misha Bragin ca1fe7cd65 Merge pull request #2 from dexidp/master 2026-04-08 11:45:14 +02:00
dependabot[bot] 05c23bde75 build(deps): bump github.com/coreos/go-oidc/v3 from 3.17.0 to 3.18.0 (#4728)
Bumps [github.com/coreos/go-oidc/v3](https://github.com/coreos/go-oidc) from 3.17.0 to 3.18.0.
- [Release notes](https://github.com/coreos/go-oidc/releases)
- [Commits](https://github.com/coreos/go-oidc/compare/v3.17.0...v3.18.0)

---
updated-dependencies:
- dependency-name: github.com/coreos/go-oidc/v3
  dependency-version: 3.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-08 11:08:26 +02:00
dependabot[bot] d11dbd2abc build(deps): bump google.golang.org/api from 0.274.0 to 0.275.0 (#4729)
Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client) from 0.274.0 to 0.275.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.274.0...v0.275.0)

---
updated-dependencies:
- dependency-name: google.golang.org/api
  dependency-version: 0.275.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-08 10:43:16 +02:00
dependabot[bot] 52ef42f49a build(deps): bump golang from 1.26.1-alpine3.22 to 1.26.2-alpine3.22 (#4727)
Bumps golang from 1.26.1-alpine3.22 to 1.26.2-alpine3.22.

---
updated-dependencies:
- dependency-name: golang
  dependency-version: 1.26.2-alpine3.22
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-08 10:04:50 +02:00
Nicolas Frati 9c138effbc fix: mfa not enforced on session validation (#4726)
Signed-off-by: jnfrati <nicofrati@gmail.com>
2026-04-08 10:01:35 +02:00
dependabot[bot] cda5c37717 build(deps): bump github.com/mattn/go-sqlite3 from 1.14.40 to 1.14.41 (#4724) 2026-04-07 07:25:40 +02:00
dependabot[bot] 832caae0d0 build(deps): bump oras-project/setup-oras from 1.2.4 to 2.0.0 (#4723) 2026-04-07 07:24:55 +02:00
Maksim Nabokikh 0977c879f3 docs: update README and remove gitpod (#4719)
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com>
2026-04-06 18:00:10 +02:00
dependabot[bot] ea243dd480 build(deps): bump github.com/lib/pq from 1.12.2 to 1.12.3 (#4720)
Bumps [github.com/lib/pq](https://github.com/lib/pq) from 1.12.2 to 1.12.3.
- [Release notes](https://github.com/lib/pq/releases)
- [Changelog](https://github.com/lib/pq/blob/master/CHANGELOG.md)
- [Commits](https://github.com/lib/pq/compare/v1.12.2...v1.12.3)

---
updated-dependencies:
- dependency-name: github.com/lib/pq
  dependency-version: 1.12.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-06 17:31:33 +02:00