435 Commits

Author SHA1 Message Date
jnfrati d493d44cbb fix: implement id token hint on rp initiated logout
Signed-off-by: jnfrati <nicofrati@gmail.com>
2026-04-13 19:25:51 +02:00
maksim.nabokikh ae0c5c0e03 Fix linter
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com>
2026-04-08 18:16:48 +02:00
maksim.nabokikh 6189b2085b Fix nonce comparison to prevent timing
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com>
2026-04-08 17:57:07 +02:00
maksim.nabokikh 2fb5d78ab7 feat: Add more tests for sessions and edge case
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com>
2026-04-08 17:35:37 +02:00
Nicolas Frati 9c138effbc fix: mfa not enforced on session validation (#4726)
Signed-off-by: jnfrati <nicofrati@gmail.com>
2026-04-08 10:01:35 +02:00
Maksim Nabokikh 3bf25fd6e0 feat: add SSO sharing policy (#4705)
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com>
2026-04-02 14:18:53 +02:00
Maksim Nabokikh 546e66cb5d feat: add WebAuthn support (#4704)
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com>
Signed-off-by: Maksim Nabokikh <max.nabokih@gmail.com>
Co-authored-by: Alwx <alwxsin@gmail.com>
2026-04-02 11:48:46 +02:00
Maksim Nabokikh 58f148dd28 feat: implement OIDC RP-Initiated logout (#4674)
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com>
Signed-off-by: Maksim Nabokikh <max.nabokih@gmail.com>
2026-04-01 08:58:44 +02:00
Maksim Nabokikh d4807b6ae6 fix: update parseSession callas after merging home page (#4701)
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com>
2026-03-30 22:58:49 +02:00
Maksim Nabokikh bc8f045ad8 feat: include prompt=select_account in back link for multiple connectors (#4694)
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com>
Signed-off-by: Maksim Nabokikh <max.nabokih@gmail.com>
2026-03-30 16:12:04 +02:00
Maksim Nabokikh 8031f5b1ca feat: add home page with user session info (#4677)
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com>
2026-03-30 15:33:30 +02:00
Roger Meier 31cf652930 feat: add a jti per default (#4695)
Signed-off-by: Roger Meier <r.meier@siemens.com>
2026-03-28 23:07:11 +00:00
Maksim Nabokikh 1558aacc8c fix: fix handler tests after merging cookie enc (#4693)
Signed-off-by: Maksim Nabokikh <maksim.nabokikh@flant.com>
2026-03-27 12:30:38 +01:00
Maksim Nabokikh 9caf0f1c9d feat: prompt select_login (#4678)
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com>
Signed-off-by: Maksim Nabokikh <max.nabokih@gmail.com>
2026-03-27 09:55:08 +01:00
Maksim Nabokikh 9f92c71d62 feat: cookies encryption support (#4676)
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com>
2026-03-27 09:33:20 +01:00
iliaandreevde 098ab6036e feat: support ES256 local signer (#4682)
Signed-off-by: Ilia Andreev <ilia.andreev@palark.com>
Co-authored-by: Ilia Andreev <ilia.andreev@palark.com>
2026-03-25 09:46:45 +01:00
Maksim Nabokikh 363e9d5228 feat: use protobuf for session cookie (#4675)
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com>
2026-03-20 22:07:41 +01:00
Maksim Nabokikh 449f66477c feat: Add AuthSession GC (#4667)
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com>
2026-03-20 20:06:43 +01:00
Maksim Nabokikh 5bbc400c5a feat: implement id_token_hint (#4670)
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com>
Signed-off-by: Maksim Nabokikh <maksim.nabokikh@flant.com>
2026-03-20 16:12:53 +01:00
Taylor Silva 92f51f9d67 fix non-constant format string in call to newRedirectedErr (#4671)
Signed-off-by: Taylor Silva <dev@taydev.net>
2026-03-20 12:16:10 +01:00
Maksim Nabokikh c3bc1d7466 feat: add auth_time, prompt, and max_age fields (#4662)
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com>
2026-03-19 15:53:15 +01:00
Maksim Nabokikh 86abd336f8 Two-Factor authentication (TOTP) (#3712)
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com>
2026-03-18 18:20:20 +01:00
Maksim Nabokikh cbd7dd7f5a feat: Create AuthSessions and set cookies (#4650)
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com>
2026-03-18 11:58:18 +01:00
Maksim Nabokikh 1e65dda440 fix(localSigner): simplify Algorithm method to always return RSA algorithm (#4655)
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com>
2026-03-17 14:13:27 +01:00
Maksim Nabokikh 12339f2cef feat: implement user identity creation and persisting consent (#4645)
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com>
2026-03-16 13:53:27 +01:00