pocket-id

20241211111554_init.up.sql

chore: include static assets in binary

2025-01-03 15:12:07 +01:00

20250103145821_pkce_column.down.sql

feat: add PKCE for non public clients

2025-01-03 16:15:10 +01:00

20250103145821_pkce_column.up.sql

feat: add PKCE for non public clients

2025-01-03 16:15:10 +01:00

20250117164229_ldap.down.sql

feat: add LDAP sync (#106 )

2025-01-19 13:02:07 +01:00

20250117164229_ldap.up.sql

feat: add LDAP sync (#106 )

2025-01-19 13:02:07 +01:00

20250118180712_rename_email_config_variable.down.sql

feat: allow sign in with email (#100 )

2025-01-19 15:30:31 +01:00

20250118180712_rename_email_config_variable.up.sql

feat: allow sign in with email (#100 )

2025-01-19 15:30:31 +01:00

20250120102531_fix_empty_ldap_id_string.down.sql

fix: non LDAP user group can't be updated after update

2025-02-03 08:37:46 +01:00

20250120102531_fix_empty_ldap_id_string.up.sql

fix: non LDAP user group can't be updated after update

2025-02-03 08:37:46 +01:00

20250131154719_oidc_user_group_restriction.down.sql

feat: map allowed groups to OIDC clients (#202 )

2025-02-03 18:41:15 +01:00

20250131154719_oidc_user_group_restriction.up.sql

feat: map allowed groups to OIDC clients (#202 )

2025-02-03 18:41:15 +01:00

20250203082527_fix_empty_user_group_ldap_id_string.down.sql

fix: non LDAP user group can't be updated after update

2025-02-03 08:37:46 +01:00

20250203082527_fix_empty_user_group_ldap_id_string.up.sql

fix: non LDAP user group can't be updated after update

2025-02-03 08:37:46 +01:00

20250210152631_post_logout_url.down.sql

feat: add end session endpoint (#232 )

2025-02-14 17:09:27 +01:00

20250210152631_post_logout_url.up.sql

feat: add end session endpoint (#232 )

2025-02-14 17:09:27 +01:00

20250225182112_manual_smtp_tls_selection.down.sql

fix: add option to manually select SMTP TLS method (#268 )

2025-02-25 19:10:20 +01:00

20250225182112_manual_smtp_tls_selection.up.sql

fix: add option to manually select SMTP TLS method (#268 )

2025-02-25 19:10:20 +01:00

20250302220732_api_key_auth.down.sql

feat: api key authentication (#291 )

2025-03-11 19:16:42 +00:00

20250302220732_api_key_auth.up.sql

feat: api key authentication (#291 )

2025-03-11 19:16:42 +00:00

20250320171311_user_locale.down.sql

feat: add support for translations (#349 )

2025-03-20 18:57:41 +00:00

20250320171311_user_locale.up.sql

feat: add support for translations (#349 )

2025-03-20 18:57:41 +00:00

20250323184520_oidc_refresh_tokens.down.sql

feat: add OIDC refresh_token support (#325 )

2025-03-23 20:14:26 +00:00

20250323184520_oidc_refresh_tokens.up.sql

feat: add OIDC refresh_token support (#325 )

2025-03-23 20:14:26 +00:00

20250403082322_audit_logs_indexes.down.sql

fix: ensure indexes on audit_logs table (#415 )

2025-04-04 17:05:32 +00:00

20250403082322_audit_logs_indexes.up.sql

fix: ensure indexes on audit_logs table (#415 )

2025-04-04 17:05:32 +00:00

20250408120918_app_config_cols.down.sql

refactor: simplify app_config service and fix race conditions (#423 )

2025-04-10 13:41:22 +02:00

20250408120918_app_config_cols.up.sql

refactor: simplify app_config service and fix race conditions (#423 )

2025-04-10 13:41:22 +02:00

20250412000000_add_user_disabled_field.down.sql

feat: disable/enable users (#437 )

2025-04-18 15:38:50 +00:00

20250412000000_add_user_disabled_field.up.sql

feat: disable/enable users (#437 )

2025-04-18 15:38:50 +00:00

20250417120000_add_expiration_email_sent_to_api_keys.down.sql

feat: send email to user when api key expires within 7 days (#451 )

2025-04-20 14:40:20 +00:00

20250417120000_add_expiration_email_sent_to_api_keys.up.sql

feat: send email to user when api key expires within 7 days (#451 )

2025-04-20 14:40:20 +00:00

20250421221059_add_device_codes.down.sql

feat: device authorization endpoint (#270 )

2025-04-25 12:14:51 -05:00

20250421221059_add_device_codes.up.sql

feat: device authorization endpoint (#270 )

2025-04-25 12:14:51 -05:00

20250601204251_clear_default_app_config_variables.down.sql

fix: clear default app config variables from database

2025-06-01 20:46:44 +02:00

20250601204251_clear_default_app_config_variables.up.sql

fix: clear default app config variables from database

2025-06-01 20:46:44 +02:00

20250609202611_client_credentials.down.sql

fix: change timestamp of client_credentials.sql migration

2025-06-09 22:58:56 +02:00

20250609202611_client_credentials.up.sql

fix: change timestamp of client_credentials.sql migration

2025-06-09 22:58:56 +02:00

20250619115053_add_country_index.down.sql

feat: location filter for global audit log (#662 )

2025-06-19 17:12:53 +00:00

20250619115053_add_country_index.up.sql

feat: location filter for global audit log (#662 )

2025-06-19 17:12:53 +00:00

20250622151258_add_signup_tokens.down.sql

feat: self-service user signup (#672 )

2025-06-27 15:01:10 -05:00

20250622151258_add_signup_tokens.up.sql

feat: self-service user signup (#672 )

2025-06-27 15:01:10 -05:00

20250628000000_audit_logs_ip_null.down.sql

fix: auth fails when client IP is empty on Postgres (#695 )

2025-06-30 14:04:30 +02:00

20250628000000_audit_logs_ip_null.up.sql

fix: auth fails when client IP is empty on Postgres (#695 )

2025-06-30 14:04:30 +02:00

20250630000000_kv_table.down.sql

feat: encrypt private keys saved on disk and in database (#682 )

2025-07-03 13:34:34 -05:00

20250630000000_kv_table.up.sql

feat: encrypt private keys saved on disk and in database (#682 )

2025-07-03 13:34:34 -05:00

20250705000000_normalize.down.sql

fix: ensure user inputs are normalized (#724 )

2025-07-13 16:15:57 +00:00

20250705000000_normalize.up.sql

fix: migration fails on postgres (#762 )

2025-07-20 22:36:22 -07:00

20250810144214_apps_dashboard.down.sql

feat: user application dashboard (#727 )

2025-08-10 15:56:03 +00:00

20250810144214_apps_dashboard.up.sql

feat: user application dashboard (#727 )

2025-08-10 15:56:03 +00:00

20250814121300_requires_reauthentication.down.sql

feat: add option to OIDC client to require re-authentication (#747 )

2025-08-22 08:56:40 +02:00

20250814121300_requires_reauthentication.up.sql

fix: wrong column type for reauthentication tokens in Postgres (#869 )

2025-08-24 14:34:29 +02:00

20250822000000_foreign_keys_improvements.down.sql

fix: postgres migration 20250822 remove public schema references (#1582 )

2026-07-11 16:11:07 +02:00

20250822000000_foreign_keys_improvements.up.sql

fix: postgres migration 20250822 remove public schema references (#1582 )

2026-07-11 16:11:07 +02:00

20250824164821_client_id_type.down.sql

fix: don't force uuid for client id in postgres

2025-08-24 18:29:41 +02:00

20250824164821_client_id_type.up.sql

chore(migrations): use TEXT instead of VARCHAR for client ID

2025-08-24 20:22:06 +02:00

20250917170000_user_display_name_and_username.down.sql

feat: allow uppercase usernames (#958 )

2025-09-17 14:43:12 -05:00

20250917170000_user_display_name_and_username.up.sql

feat: allow uppercase usernames (#958 )

2025-09-17 14:43:12 -05:00

20251001115300_optional_email.down.sql

feat: add the ability to make email optional (#994 )

2025-10-03 11:24:53 +02:00

20251001115300_optional_email.up.sql

feat: add the ability to make email optional (#994 )

2025-10-03 11:24:53 +02:00

20251018000000_add_dark_logo.down.sql

feat: add support for dark mode oidc client icons (#1039 )

2025-10-24 09:57:12 +02:00

20251018000000_add_dark_logo.up.sql

feat: add support for dark mode oidc client icons (#1039 )

2025-10-24 09:57:12 +02:00

20251024000000_webauthn_credential_params.down.sql

chore: upgrade dependencies

2025-10-24 12:18:38 +02:00

20251024000000_webauthn_credential_params.up.sql

chore: upgrade dependencies

2025-10-24 12:18:38 +02:00

20251106144600_redundant_indexes.down.sql

fix: remove redundant indexes in Postgres

2025-11-06 15:02:39 +01:00

20251106144600_redundant_indexes.up.sql

fix: remove redundant indexes in Postgres

2025-11-06 15:02:39 +01:00

20251110000000_storage_table.down.sql

feat: add database storage backend (#1091 )

2025-11-16 18:23:46 +01:00

20251110000000_storage_table.up.sql

feat: add database storage backend (#1091 )

2025-11-16 18:23:46 +01:00

20251115000000_api_keys_expires_at_index.down.sql

feat: add database storage backend (#1091 )

2025-11-16 18:23:46 +01:00

20251115000000_api_keys_expires_at_index.up.sql

feat: add database storage backend (#1091 )

2025-11-16 18:23:46 +01:00

20251210000000_one_time_access_device_token.down.sql

fix: restrict email one time sign in token to same browser (#1144 )

2025-12-12 14:51:07 +01:00

20251210000000_one_time_access_device_token.up.sql

fix: restrict email one time sign in token to same browser (#1144 )

2025-12-12 14:51:07 +01:00

20251217000000_signup_token_groups.down.sql

feat: add ability define user groups for sign up tokens (#1155 )

2025-12-21 18:26:52 +01:00

20251217000000_signup_token_groups.up.sql

feat: add ability define user groups for sign up tokens (#1155 )

2025-12-21 18:26:52 +01:00

20251217141000_v2_export_normalization.down.sql

chore: preparation for merge into main branch

2025-12-30 17:01:22 +01:00

20251217141000_v2_export_normalization.up.sql

chore: preparation for merge into main branch

2025-12-30 17:01:22 +01:00

20251219000000_oidc_client_group_restriction.down.sql

feat: restrict oidc clients by user groups per default (#1164 )

2025-12-24 09:09:25 +01:00

20251219000000_oidc_client_group_restriction.up.sql

feat: restrict oidc clients by user groups per default (#1164 )

2025-12-24 09:09:25 +01:00

20251229173100_scim_service_providers.down.sql

feat: add support for SCIM provisioning (#1182 )

2026-01-02 17:54:20 +01:00

20251229173100_scim_service_providers.up.sql

feat: add support for SCIM provisioning (#1182 )

2026-01-02 17:54:20 +01:00

20260102231700_ldap_admin_group_rename.down.sql

fix: admins imported from LDAP lose admin privileges

2026-01-02 23:42:25 +01:00

20260102231700_ldap_admin_group_rename.up.sql

fix: migration fails if users exist with no email address

2026-01-03 15:06:34 +01:00

20260103142200_user_nullable_fields.down.sql

chore: add no-op migration to postgres

2026-01-03 15:12:14 +01:00

20260103142200_user_nullable_fields.up.sql

chore: add no-op migration to postgres

2026-01-03 15:12:14 +01:00

20260104190900_add_nonce_to_device_codes.down.sql

feat: process nonce within device authorization flow (#1185 )

2026-01-04 18:18:17 +00:00

20260104190900_add_nonce_to_device_codes.up.sql

feat: process nonce within device authorization flow (#1185 )

2026-01-04 18:18:17 +00:00

20260106140900_sqlite_export_normalization.down.sql

fix: data import from sqlite to postgres fails because of wrong datatype

2026-01-06 16:08:49 +01:00

20260106140900_sqlite_export_normalization.up.sql

fix: data import from sqlite to postgres fails because of wrong datatype

2026-01-06 16:08:49 +01:00

20260109090200_email_verification.down.sql

feat: add support for email verification (#1223 )

2026-01-11 12:31:26 +01:00

20260109090200_email_verification.up.sql

feat: add support for email verification (#1223 )

2026-01-11 12:31:26 +01:00

20260304090200_indexes.down.sql

fix: various fixes in background jobs (#1362 )

2026-03-07 17:07:26 +00:00

20260304090200_indexes.up.sql

fix: various fixes in background jobs (#1362 )

2026-03-07 17:07:26 +00:00

20260418120000_oidc_amr_claim.down.sql

feat: add auth method claim (amr) to tokens (#1433 )

2026-04-18 22:31:24 +02:00

20260418120000_oidc_amr_claim.up.sql

feat: add auth method claim (amr) to tokens (#1433 )

2026-04-18 22:31:24 +02:00

20260518222000_oidc_refresh_token_id_token_jti.down.sql

feat: delete OAuth refresh token on RP initiated logout (#1480 )

2026-05-19 17:05:44 +02:00

20260518222000_oidc_refresh_token_id_token_jti.up.sql

feat: delete OAuth refresh token on RP initiated logout (#1480 )

2026-05-19 17:05:44 +02:00

20260601154900_par.down.sql

feat(oauth): add support for Pushed Authorization Requests (RFC9126) (#1404 )

2026-06-02 14:02:12 +02:00

20260601154900_par.up.sql

fix: PAR parameters not respected by authorize page

2026-06-16 09:29:34 +02:00

20260607120000_oauth2_storage.down.sql

refactor: use fosite for OAuth 2.0 logic (#1520 )

2026-06-22 18:42:02 +02:00

20260607120000_oauth2_storage.up.sql

refactor: use fosite for OAuth 2.0 logic (#1520 )

2026-06-22 18:42:02 +02:00

20260626120000_oidc_client_skip_consent.down.sql

feat: add ability to skip consent for client

2026-06-26 23:35:26 +02:00

20260626120000_oidc_client_skip_consent.up.sql

feat: add ability to skip consent for client

2026-06-26 23:35:26 +02:00

20260626153900_add_pkce_supported_to_oidc_clients.down.sql

refactor: rename migrations

2026-07-07 17:16:10 +02:00

20260626153900_add_pkce_supported_to_oidc_clients.up.sql

refactor: rename migrations

2026-07-07 17:16:10 +02:00

20260707170000_oauth_apis.down.sql

refactor: rename migrations

2026-07-07 17:16:10 +02:00

20260707170000_oauth_apis.up.sql

refactor: rename migrations

2026-07-07 17:16:10 +02:00

20260708120000_add_oidc_client_description.down.sql

feat: add description field to oidc clients (#1547 )

2026-07-08 13:41:51 +02:00

20260708120000_add_oidc_client_description.up.sql

feat: add description field to oidc clients (#1547 )

2026-07-08 13:41:51 +02:00

20260708130000_move_instance_id_to_kv.down.sql

refactor: manage instance ID in the KV table (#1579 )

2026-07-11 16:16:05 +02:00

20260708130000_move_instance_id_to_kv.up.sql

refactor: manage instance ID in the KV table (#1579 )

2026-07-11 16:16:05 +02:00

20260718000000_freeze_config.down.sql

refactor: use actors for db configuration (#1604 )

2026-07-20 08:48:05 +02:00

20260718000000_freeze_config.up.sql

refactor: use actors for db configuration (#1604 )

2026-07-20 08:48:05 +02:00

20260722120000_oauth_storage_export_normalization.down.sql

fix: datatype mismatch between postgres and sqlite causes import to fail

2026-07-22 18:13:13 +02:00

20260722120000_oauth_storage_export_normalization.up.sql

fix: datatype mismatch between postgres and sqlite causes import to fail

2026-07-22 18:13:13 +02:00

20260723000000_actor_tokens.down.sql

feat: migrate one-time and signup tokens to an actor (#1611 )

2026-07-26 15:32:43 +02:00

20260723000000_actor_tokens.up.sql

feat: migrate one-time and signup tokens to an actor (#1611 )

2026-07-26 15:32:43 +02:00

20260727120000_email_verification_actors.down.sql

refactor: modularize email module and use actor for email verification (#1625 )

2026-07-27 20:00:59 +02:00

20260727120000_email_verification_actors.up.sql

refactor: modularize email module and use actor for email verification (#1625 )

2026-07-27 20:00:59 +02:00

20260728120000_oidc_client_id_metadata_document.down.sql

feat: implement OAuth Client ID Metadata Document (#1525 ) (#1526 )

2026-08-02 15:05:39 +00:00

20260728120000_oidc_client_id_metadata_document.up.sql

feat: implement OAuth Client ID Metadata Document (#1525 ) (#1526 )

2026-08-02 15:05:39 +00:00

20260731120000_oauth2_session_ownership.down.sql

fix: session revoke fails if orphaned session tokens exist

2026-08-02 18:31:15 +02:00

20260731120000_oauth2_session_ownership.up.sql

fix: session revoke fails if orphaned session tokens exist

2026-08-02 18:31:15 +02:00

20260802120000_add_oidc_client_token_lifetimes.down.sql

feat: add ability to customize session duration of clients (#1641 )

2026-08-03 23:23:29 +02:00

20260802120000_add_oidc_client_token_lifetimes.up.sql

feat: add ability to customize session duration of clients (#1641 )

2026-08-03 23:23:29 +02:00

20260807120000_oidc_client_multiple_secrets.down.sql

feat: support multiple client secrets per OIDC client (#1679 )

2026-08-11 00:54:52 +00:00

20260807120000_oidc_client_multiple_secrets.up.sql

feat: support multiple client secrets per OIDC client (#1679 )

2026-08-11 00:54:52 +00:00

20260814120000_api_client_access.down.sql

feat: allow admins to auto grant APIs to CIMD clients (#1692 )

2026-08-18 20:02:14 +02:00

20260814120000_api_client_access.up.sql

feat: allow admins to auto grant APIs to CIMD clients (#1692 )

2026-08-18 20:02:14 +02:00

20260907140000_webauthn_session_extensions.down.sql

chore(deps): Bump the "all-dependencies" group with 3 updates across multiple ecosystems (#1739 )

2026-09-07 09:24:16 -05:00

20260907140000_webauthn_session_extensions.up.sql

chore(deps): Bump the "all-dependencies" group with 3 updates across multiple ecosystems (#1739 )

2026-09-07 09:24:16 -05:00

20260916120000_webauthn_credential_icon.down.sql

feat: include passkey icons based on AAGUID (#1756 )

2026-09-19 09:41:53 -07:00

20260916120000_webauthn_credential_icon.up.sql

feat: include passkey icons based on AAGUID (#1756 )

2026-09-19 09:41:53 -07:00

20260923183637_add_oidc_client_backchannel_logout_url.down.sql

feat: add OIDC back-channel logout (#1734 )

2026-09-23 21:34:38 +02:00

20260923183637_add_oidc_client_backchannel_logout_url.up.sql

feat: add OIDC back-channel logout (#1734 )

2026-09-23 21:34:38 +02:00

20260929120000_refresh_token_rotation_grace.down.sql

fix: add 1min grace period to refresh token invalidation

2026-09-29 22:56:21 +02:00

20260929120000_refresh_token_rotation_grace.up.sql

fix: add 1min grace period to refresh token invalidation

2026-09-29 22:56:21 +02:00

20261006120000_sqlite_postgres_schema_alignment.down.sql

fix: export from SQLite fails to import into Postgres because of mismatched schemas

2026-10-06 20:00:22 +02:00

20261006120000_sqlite_postgres_schema_alignment.up.sql

fix: export from SQLite fails to import into Postgres because of mismatched schemas

2026-10-06 20:00:22 +02:00

20261011120000_email_verification_deadline.down.sql

feat: add ability to force email verification (#1837 )

2026-10-13 22:04:33 +02:00

20261011120000_email_verification_deadline.up.sql

feat: add ability to force email verification (#1837 )

2026-10-13 22:04:33 +02:00