Loïs PostulaandLinus Rath 638fc7db4e feat(oauth): add OAUTH_AUTHORIZE_URL to override authorize endpoint ...

Lets a per-brand authorize host front a single canonical issuer, so the
IdP token's `iss` stays constant for downstream validation while login
branding varies per domain. Discovery, token exchange and refresh keep
using OAUTH_ISSUER_URL.

2026-06-19 12:30:23 +02:00

..

audit.ts

feat: web setup wizard + admin config/state dir split (#226)

2026-05-09 17:37:41 +02:00

config-manager.ts

feat: web setup wizard + admin config/state dir split (#226)

2026-05-09 17:37:41 +02:00

csp-frame-origins.ts

fix: correct regex for valid API post path validation

2026-05-18 12:44:54 +02:00

domain-branding.ts

Feature: configurable PWA install screenshots (per-domain)

2026-05-30 15:45:59 +02:00

jmap-servers.ts

chore: update version to 1.6.2

2026-05-06 20:07:36 +02:00

migrate.ts

feat: add passwordHashFile to admin.json

2026-06-02 23:48:03 +02:00

password.ts

feat: add passwordHashFile to admin.json

2026-06-02 23:48:03 +02:00

paths.ts

feat: web setup wizard + admin config/state dir split (#226)

2026-05-09 17:37:41 +02:00

plugin-approvals.ts

feat: expose PWA, app identity, and extension directory keys in JSON config #312

2026-05-21 23:35:58 +02:00

plugin-config.ts

feat: web setup wizard + admin config/state dir split (#226)

2026-05-09 17:37:41 +02:00

plugin-dev.ts

feat: expose PWA, app identity, and extension directory keys in JSON config #312

2026-05-21 23:35:58 +02:00

plugin-registry.ts

Feature: localizable sandboxed plugins (manifest locales + api.i18n.t)

2026-05-30 15:56:55 +02:00

plugin-signing.ts

feat: expose PWA, app identity, and extension directory keys in JSON config #312

2026-05-21 23:35:58 +02:00

rate-limit.ts

feat: add plugin/theme harness and admin dashboard

2026-03-25 00:44:03 +01:00

session.ts

fix: gate admin routes against cross-origin CSRF

2026-05-18 13:21:01 +02:00

types.ts

feat(oauth): add OAUTH_AUTHORIZE_URL to override authorize endpoint

2026-06-19 12:30:23 +02:00