12 Commits

Author SHA1 Message Date
Elias Schneider f81d62c16c feat: add ability to deselect scopes on authorization 2026-10-15 22:18:21 +02:00
Elias Schneider 0ffeb170cf feat: add ability to force email verification (#1837) 2026-10-13 22:04:33 +02:00
Elias Schneider fd7951f70e chore(deps): update Fosite 2026-10-11 00:16:20 +02:00
Elias Schneider 0ec6bfa191 refactor: authorize API routes with per-endpoint scopes (#1823)
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
2026-10-09 21:33:14 +02:00
Elias Schneider 2084dffd8d fix: prevent PAR requirement bypass via conflicting request parameters 2026-09-17 21:37:41 +02:00
Elias Schneider 915a6bcf08 feat: allow admins to auto grant APIs to CIMD clients (#1692) 2026-08-18 20:02:14 +02:00
Elias Schneider 1bb21c5d73 refactor: move iss param handling to Fosite 2026-08-12 23:25:35 +02:00
Elias Schneider 7a4d0dd275 refactor: standardize API error handling (#1635) 2026-08-02 23:36:06 +02:00
Elias Schneider 25dcad757a feat: add support for unencrypted OIDC request parameter 2026-07-08 10:42:05 +02:00
Elias Schneider 16b5c16a66 fix: CSP error with response_mode=form_post 2026-06-26 14:51:56 +02:00
Elias Schneider 8689ddd72b feat: improve error handling on authorize page 2026-06-22 22:12:14 +02:00
Elias Schneider 8158452b37 refactor: use fosite for OAuth 2.0 logic (#1520) 2026-06-22 18:42:02 +02:00