0f8e192b5c
feat: initial auth rework
2026-03-07 17:10:34 -05:00
403f9c9b0b
feat: add lazy retrying oidc connector
2026-01-16 00:33:10 -05:00
3a3e5ca65e
feat: pkce
2025-12-04 11:37:22 -05:00
199ef46ee1
fix: correctly passthrough and handle a new OIDC redirect_uri system
2025-12-04 10:34:48 -05:00
ba61656fb0
feat: cleanup oidc logic and surface errors better
2025-12-04 00:44:31 -05:00
d3d7c7cc0e
feat: better error handling for oidc api key
...
This also ships with a better error page
2025-11-28 17:54:52 -05:00
eb4669498a
feat: overhaul oidc work
2025-08-28 22:55:26 -04:00
d2c4f5eb2b
feat: completely overhaul the auth model
...
* Cookies are now encrypted JWTs (GHSA-wrqq-v7qw-r5w7)
* Authentication is stored in the SQLite database (auto-migrated)
* Session logic is much cleaner
2025-08-19 17:52:16 -04:00
34cfee7cff
feat: reach an initial working stage
2025-03-24 16:15:38 -04:00
6108de52e7
feat: switch to a central singleton handler
...
This also adds support for Headscale TLS installations
2025-03-17 22:21:16 -04:00
f5436f5ee3
feat: respect context in server
2025-02-19 18:09:42 -05:00
76d263b7e6
feat: switch to config file system
2025-02-13 12:35:12 -05:00
bd11453593
fix: store oidc redirect_uri in session for parity
2025-01-18 08:18:19 +00:00
5569ba4660
feat: rework oidc to be more resilient
...
This includes setting a custom redirect URI, handling errors, and using a better library.
As an API decision I've also disabled per session API keys as it clutters up too much.
2025-01-10 13:55:24 +05:30
Aarnav Tale