Linus Rath 31100b8f87 fix: discover OIDC metadata server-side to avoid CORS failures #382

2026-06-02 00:15:50 +02:00

..

impersonate

feat: expose PWA, app identity, and extension directory keys in JSON config #312

2026-05-21 23:35:58 +02:00

oauth/metadata

fix: discover OIDC metadata server-side to avoid CORS failures #382

2026-06-02 00:15:50 +02:00

session

fix: honor cookieSameSite admin config override #284

2026-05-14 21:49:37 +02:00

sso

fix: add OAUTH_ALLOW_PRIVATE_ENDPOINTS for split-DNS setups

2026-05-22 17:22:14 +02:00

stalwart-context

fix: bind stalwart auth context to credential, not cookie-claimed username

2026-05-18 13:00:40 +02:00

token

feat: lift 5-account cap on HTTP/2

2026-05-07 12:28:33 +02:00

totp-token-exchange

fix: add OAUTH_ALLOW_PRIVATE_ENDPOINTS for split-DNS setups

2026-05-22 17:22:14 +02:00