Loïs Postula 638fc7db4e feat(oauth): add OAUTH_AUTHORIZE_URL to override authorize endpoint ...

Lets a per-brand authorize host front a single canonical issuer, so the
IdP token's `iss` stays constant for downstream validation while login
branding varies per domain. Discovery, token exchange and refresh keep
using OAUTH_ISSUER_URL.

2026-06-19 12:30:23 +02:00

..

impersonate

feat: expose PWA, app identity, and extension directory keys in JSON config #312

2026-05-21 23:35:58 +02:00

oauth/metadata

fix: discover OIDC metadata server-side to avoid CORS failures #382

2026-06-02 00:15:50 +02:00

pair

feat: require re-authentication for device pairing and SSO

2026-06-05 19:23:06 +02:00

reauth/sso/complete

feat: require re-authentication for device pairing and SSO

2026-06-05 19:23:06 +02:00

session

fix: honor cookieSameSite admin config override #284

2026-05-14 21:49:37 +02:00

sso

feat(oauth): add OAUTH_AUTHORIZE_URL to override authorize endpoint

2026-06-19 12:30:23 +02:00

stalwart-context

fix: bind stalwart auth context to credential, not cookie-claimed username

2026-05-18 13:00:40 +02:00

token

feat: lift 5-account cap on HTTP/2

2026-05-07 12:28:33 +02:00

totp-token-exchange

fix: add OAUTH_ALLOW_PRIVATE_ENDPOINTS for split-DNS setups

2026-05-22 17:22:14 +02:00