3 people 8e82ec1cb9 Merge commit from fork ...

* Add DenyLists parsing

* Remove unneeded returned error

* Plug global denylist into Command

* app creation: apply denylist to backchannel logout URI

* Inject denylist to backchannel logout worker

* webhook config: validate against blocked URLs

* Add notificationsWebhook denylist target

* command: Add SMTP endpoint validation against blocklist

* command: Add SMS endpoint validation against blocklist

* Validate webhook endpoint against denylist on channel notification

* Remove unused tests

* handle deprecated denylists

* remove unintended denylist entry in deprecated list

* use single http client

* fix tests

* update comments

* fixes

* cleanup

* address comments

* fix merge

---------

Co-authored-by: Livio Spring <[email protected]>

2026-06-15 15:36:14 +02:00

..

static

chore: rename login data to login details (#11127)

2026-02-16 09:42:50 +00:00

statik

feat: device authorization RFC 8628 (#5646)

2023-04-19 08:46:02 +00:00

auth_request.go

fix(login): ensure auth request (#8004)

2024-05-24 14:58:45 +00:00

change_password_handler.go

fix(login): allow fallback to local auth in case of IdP errors (#9178)

2025-01-15 10:39:28 +00:00

custom_action.go

Merge commit from fork

2026-06-15 15:36:14 +02:00

device_auth.go

fix(login): allow fallback to local auth in case of IdP errors (#9178)

2025-01-15 10:39:28 +00:00

external_provider_handler_test.go

fix: token for post authentication action and change phone and email (#5933)

2023-05-26 07:24:52 +00:00

external_provider_handler.go

Merge commit from fork

2026-06-15 15:36:14 +02:00

health_handler.go

feat: run on a single port (#3163)

2022-02-14 17:22:30 +01:00

init_password_handler.go

Merge commit from fork

2026-01-14 09:51:07 +01:00

init_user_handler.go

Merge commit from fork

2026-01-14 09:51:07 +01:00

invite_user_handler.go

Merge commit from fork

2026-01-14 09:51:07 +01:00

jwt_handler.go

feat: add PKCE option to generic OAuth2 / OIDC identity providers (#9373)

2025-02-26 12:20:47 +00:00

ldap_handler.go

feat: add PKCE option to generic OAuth2 / OIDC identity providers (#9373)

2025-02-26 12:20:47 +00:00

link_users_handler.go

fix(login): allow fallback to local auth in case of IdP errors (#9178)

2025-01-15 10:39:28 +00:00

login_handler.go

fix(login): allow fallback to local auth in case of IdP errors (#9178)

2025-01-15 10:39:28 +00:00

login_success_handler.go

fix(login): allow fallback to local auth in case of IdP errors (#9178)

2025-01-15 10:39:28 +00:00

login_test.go

fix: correctly send links to login v2 in email notifications (#10711)

2026-02-13 13:06:56 +00:00

login.go

Merge commit from fork

2026-06-15 15:36:14 +02:00

logout_handler.go

fix(login): allow fallback to local auth in case of IdP errors (#9178)

2025-01-15 10:39:28 +00:00

mail_verify_handler.go

Merge commit from fork

2026-01-14 09:51:07 +01:00

metadata.go

fix: correct user self management on metadata and delete (#10666)

2025-09-16 12:26:21 +00:00

mfa_init_done_handler.go

fix(login): allow fallback to local auth in case of IdP errors (#9178)

2025-01-15 10:39:28 +00:00

mfa_init_sms.go

feat: Add SMS country code selector to SMT OTP (LoginV1) (#11373)

2026-01-22 06:47:54 +00:00

mfa_init_u2f.go

fix(login): allow fallback to local auth in case of IdP errors (#9178)

2025-01-15 10:39:28 +00:00

mfa_init_verify_handler.go

fix(login): allow fallback to local auth in case of IdP errors (#9178)

2025-01-15 10:39:28 +00:00

mfa_prompt_handler.go

fix(login): allow fallback to local auth in case of IdP errors (#9178)

2025-01-15 10:39:28 +00:00

mfa_verify_handler.go

fix: add user info to context for set metadata in actions (#10426)

2025-08-11 16:43:52 +02:00

mfa_verify_otp_handler.go

feat: Add recovery code MFA support (#9954)

2025-11-24 06:44:48 +00:00

mfa_verify_u2f_handler.go

fix: add user info to context for set metadata in actions (#10426)

2025-08-11 16:43:52 +02:00

password_complexity_policy_handler.go

Merge commit from fork

2026-01-14 09:51:07 +01:00

password_handler.go

fix: add user info to context for set metadata in actions (#10426)

2025-08-11 16:43:52 +02:00

password_reset_handler.go

fix(login v1): handle password reset when authenticating with email or phone number (#10228)

2025-07-10 09:29:26 +02:00

passwordless_login_handler.go

fix: add user info to context for set metadata in actions (#10426)

2025-08-11 16:43:52 +02:00

passwordless_prompt_handler.go

fix(login): allow fallback to local auth in case of IdP errors (#9178)

2025-01-15 10:39:28 +00:00

passwordless_registration_handler.go

fix(login): allow fallback to local auth in case of IdP errors (#9178)

2025-01-15 10:39:28 +00:00

policy_handler.go

feat: idp v2 api GetIDPByID (#8425)

2024-08-14 18:18:29 +00:00

register_handler.go

Merge commit from fork

2025-08-21 09:02:32 +02:00

register_option_handler.go

chore: forward port organization v2 API changes (#11207)

2026-01-05 14:14:01 +00:00

register_org_handler.go

chore: forward port organization v2 API changes (#11207)

2026-01-05 14:14:01 +00:00

renderer.go

fix: recover from request panics (#11713)

2026-03-03 11:55:17 +00:00

resources_handler.go

feat: restrict languages (#6931)

2023-12-05 11:12:01 +00:00

router.go

feat(telemetry): unify request details (#11509)

2026-03-18 14:07:33 +01:00

select_user_handler.go

Merge commit from fork

2025-08-21 09:02:32 +02:00

username_change_handler.go

fix(login): allow fallback to local auth in case of IdP errors (#9178)

2025-01-15 10:39:28 +00:00

webauthn.go

feat: run on a single port (#3163)

2022-02-14 17:22:30 +01:00