Andras Bacsai
3b08be1429
fix(auth): handle concurrent OAuth identity creation safely
...
Recover existing OAuth and OIDC identities after unique constraint races and reject boolean or floating-point provider IDs.
2026-08-18 15:43:46 +02:00
Andras Bacsai
fc32bc6b6c
feat(auth): auto-join OAuth users to root team
...
Add an OAuth setting that provisions newly registered users as Root
team members without creating a personal team.
2026-07-02 15:13:39 +02:00
Andras Bacsai
c656892738
fix(auth): store OIDC raw claims as arrays
...
Handle missing provider payloads by persisting an empty array and add
coverage for multi-audience OIDC azp validation.
2026-06-15 13:33:23 +02:00
Andras Bacsai
8d92059dd6
fix(auth): refresh OIDC JWKS and block unverified account linking
2026-06-15 12:49:51 +02:00
Andras Bacsai
21333f02f9
fix(settings): harden OIDC, email, and log drain flows
2026-06-15 12:35:05 +02:00
Andras Bacsai
e354840e5a
feat(auth): add OIDC SSO and registration controls
...
Add OIDC discovery, JWKS validation, Socialite integration, OAuth identity linking, and configurable registration policy for password and SSO signups. Update related settings/profile UI and tests.
2026-06-04 13:59:08 +02:00
