Anso 1d89e8ce59 fix(sso): harden SSO with role sync, security fixes, design compliance, and test coverage (#564) ...

Rate-limit OIDC callback route and clear state cookie on all paths.
Validate GitHub API responses and add server-side config validation.
Sync SSO user roles on every login respecting seat limits.
Add LDAP connection timeout, bind DN warning, and multiple entry logging.
Replace Select with Combobox and apply card design tokens in SSOSection.
Expose OIDC scopes field in settings UI.
Fix hardcoded colors to use design system tokens.
Add standard and diagnostic logging throughout SSO flow.
Add tests for role sync, seat limits, LDAP escaping, and config validation.
Remove unused login-form.tsx template.
Update docs and screenshots for SSO feature.

2026-04-13 17:46:38 -04:00

..

configuration.mdx

fix: run as root by default to eliminate stack-folder permission failures (#501)

2026-04-10 21:35:31 -04:00

introduction.mdx

docs: comprehensive review and refresh of all documentation (#374)

2026-04-04 21:32:51 -04:00

quickstart.mdx

docs: comprehensive review and refresh of all documentation (#374)

2026-04-04 21:32:51 -04:00

sso-quickstart.mdx

fix(sso): harden SSO with role sync, security fixes, design compliance, and test coverage (#564)

2026-04-13 17:46:38 -04:00