Linus Rath 29778da2d4 fix: wait out an unreachable token endpoint instead of counting it toward a sign-out ...

An existing assertion changes: a token endpoint that can't be reached now answers 503, not 500, because the client counts repeated 500s as permanent and signs the user out.

2026-11-03 05:54:34 +01:00

..

handoff

fix: give a hand-off redeem back when the store fails, and hand out a sign-in whose tombstone couldn't be written #1066

2026-11-01 00:03:19 +01:00

impersonate

fix: answer 503 when an impersonation link's use can't be recorded and keep used links as expiring keys #1066

2026-11-01 00:07:41 +01:00

oauth/metadata

fix: discover OIDC metadata server-side to avoid CORS failures #382

2026-06-02 00:15:50 +02:00

pair

fix: give a pair step-up attempt back only to the windows it was counted in #1066

2026-11-01 00:05:09 +01:00

reauth/sso/complete

feat: let a phone pair through any instance and keep pairing secrets sealed in the shared store #1066

2026-10-31 23:16:11 +01:00

session

feat: let a phone pair through any instance and keep pairing secrets sealed in the shared store #1066

2026-10-31 23:16:11 +01:00

sso

feat: let the mobile app redeem a sign-in hand-off through any instance #1066

2026-10-31 23:19:36 +01:00

stalwart-context

feat: stop sending a refused stored password from any instance once one has seen it refused #1066

2026-10-31 23:07:12 +01:00

token

fix: wait out an unreachable token endpoint instead of counting it toward a sign-out

2026-11-03 05:54:34 +01:00

totp-token-exchange

feat: count sign-in, pre-check, pair step-up and hand-off limits across every instance #1066

2026-10-31 23:04:05 +01:00

verify

feat: count sign-in, pre-check, pair step-up and hand-off limits across every instance #1066

2026-10-31 23:04:05 +01:00