3 Commits

Include renames

Author	SHA1	Message	Date
Matthieu MALVACHE	2f20aa835b	feat(auth): add RP-initiated logout and OAuth unit tests ... Logout now revokes the refresh token and redirects to the IdP's end_session_endpoint so the SSO session is fully terminated. The end_session_url is validated server-side (HTTPS only) before being returned to the client, preventing open redirect attacks. Also adds 14 unit tests covering PKCE (including RFC 7636 test vector) and OAuth discovery (fallback, caching, required field validation).	2026-02-26 00:07:38 +01:00
Matthieu MALVACHE	d235403d4c	feat(auth): add explicit OAuth issuer URL and improve discovery diagnostics ... Support external IdPs (Keycloak, Authentik) that handle auth separately from the JMAP server via OAUTH_ISSUER_URL. Also surfaces discovery failures with logged errors and a visible warning banner instead of silently hiding the SSO button.	2026-02-25 23:38:27 +01:00
Matthieu MALVACHE	2ae0520026	feat(auth): add OAuth2/OIDC with PKCE for SSO login ... Add OAuth2 authorization code flow with PKCE as an alternative to basic auth. Supports Stalwart's built-in OAuth provider with automatic token refresh, session persistence via httpOnly cookies, and graceful fallback to basic auth when OAuth is not configured.	2026-02-25 16:04:17 +01:00