6 Commits

Author	SHA1	Message	Date
饺子w (Yumechi)	ad977d3d9c	feat: EdDSA token for database leakage/index mitigation (#971) ... * feat: EdDSA token for database leakage/index mitigation * [skip ci]: remove token from api output * fix: e2e tests * fixup! fix: e2e tests * doc: document tokens are now optional fields for app and aclient * fixup(doc): swagger version again * address review comments * address review comments	2026-06-28 14:58:20 +00:00
Jannis Mattheis	bf6d8eee85	fix: map oidc user to iss/sub	2026-06-20 14:07:49 +02:00
Jannis Mattheis	cf9a1ea32f	fix: align session client expiry with cookie max age	2026-05-18 17:16:08 +02:00
Jannis Mattheis	2674f729eb	fix: use decay map	2026-04-11 18:53:48 +02:00
Jannis Mattheis	fb6f90bf59	fix: don't store client name in state	2026-04-11 18:53:48 +02:00
Jannis Mattheis	491325b06f	test: oidc tests ... It's not easy to test this automatically without a real oidc server.	2026-04-11 18:53:48 +02:00