Anso 6890224903 fix(sso): harden Custom OIDC provider and SSO configuration (#630) ...

- Add Host header injection validation for OAuth callback URL derivation
  when SSO_CALLBACK_URL is not set (extracted into shared getSSOBaseUrl helper)
- Add startup warning when OIDC providers are enabled without SSO_CALLBACK_URL
- Add diagnostic logging for claim fallback, email changes on re-login,
  and admin seat limit enforcement (gated behind Developer Mode)
- Add Custom OIDC environment variables to .env.example
- Fix stale AdmiralGate comment in SSOSection.tsx
- Fix .env.example section header referencing removed Admiral tier gate
- Fix docs: correct Custom OIDC display name default, replace nonexistent
  DEBUG=true env var reference with Developer Mode toggle
- Add tests for role enforcement (viewer 403), API token scope denial,
  OIDC claim edge cases, Custom OIDC test connection, callback error params
- Refresh SSO settings screenshots

2026-04-16 08:10:28 -04:00

..

api-reference

fix(container-exec): harden with security fixes, validation, and test coverage (#577)

2026-04-14 08:23:05 -04:00

features

fix(sso): harden Custom OIDC provider and SSO configuration (#630)

2026-04-16 08:10:28 -04:00

getting-started

feat: add Custom OIDC provider and move SSO to Community tier (#626)

2026-04-15 23:15:28 -04:00

images

fix(sso): harden Custom OIDC provider and SSO configuration (#630)

2026-04-16 08:10:28 -04:00

operations

feat: docker run to compose converter (#623)

2026-04-15 20:23:12 -04:00

reference

fix(stacks): harden stack management with security, validation, and logging (#520)

2026-04-12 05:43:15 -04:00

custom.css

docs: align documentation theme with Sencho app branding (#199)

2026-03-27 18:44:37 -04:00

docs.json

feat(auth): add TOTP two-factor authentication with backup codes (#615)

2026-04-15 18:45:51 -04:00

openapi.yaml

fix(api-tokens): harden with security fixes, design compliance, and test coverage (#567)

2026-04-13 18:32:07 -04:00