atauth
AtAuth
Star 7
Fork 0
Watch

Commits on 5ce3861f0f61d54d98a46bd8544c83e4e05cb807

Bryan Brooks
feat: per-client access rules for OIDC and Legacy HMAC apps
committed
Bryan Brooks
fix(ci): lowercase Docker image name for GHCR
committed
Bryan Brooks
ci: add GitHub Actions release workflow for GHCR
committed
Bryan Brooks
chore: sanitize docs for FOSS release, add GitHub CI
committed
Bryan Brooks
feat: passkey login for forward-auth proxy + security hardening
committed
Bryan Brooks
docs: mark CI pipeline and /version endpoint as done
committed
Bryan Brooks
feat: add /version endpoint and deployment docs
committed
Bryan Brooks
docs: add DO k8s handoff doc for new team
committed
Bryan Brooks
feat: polish admin dashboard UI, add screenshots section to README
committed
Bryan Brooks
fix: resolve eslint errors in test files (unused imports)
committed
Bryan Brooks
chore: midday repo cleanup -- remove stale files, fix URLs
committed
Bryan Brooks
ci: retrigger build with file change
committed
Bryan Brooks
ci: retrigger after runner DB fix (WAL mode + busy timeout)
committed
Bryan Brooks
ci: verify runner after cleanup
committed
Bryan Brooks
ci: trigger build after runner cleanup
committed
Bryan Brooks
fix: passkey auth client unwraps options from API response
committed
Bryan Brooks
fix: Express 5 req.params type safety, restore CI pipeline
committed
Bryan Brooks
deps: upgrade simplewebauthn v13, better-sqlite3 v12, patch updates
committed
Bryan Brooks
chore: simplify node_modules gitignore pattern
committed
Bryan Brooks
docs: fix Quick Start, docker-compose env passthrough, HOMELAB
committed
Bryan Brooks
docs: rewrite Quick Start with domain setup and reverse proxy
committed
Bryan Brooks
chore: remove Claude Code files from repo, add to gitignore
committed
Bryan Brooks
refactor: move CLAUDE.md details into slash command skills
committed
Bryan Brooks
docs: update project docs, add audit logging and input validation
committed
Bryan Brooks
test: add OIDC endpoint and passkey service tests
committed
Bryan Brooks
fix: dockerignore pattern for recursive test file exclusion
committed
Bryan Brooks
chore: bump version to 2.2.0 and add missing test files
committed
Bryan Brooks
chore: sanitize for FOSS release
committed
Bryan Brooks
ci: retrigger deploy
committed
Bryan Brooks
ci: retrigger deploy after runner restart
committed
Bryan Brooks
fix: return descriptive 400 for unresolvable AT Protocol handles
committed
Bryan Brooks
feat: add 10 OIDC app presets to setup wizard
committed
Bryan Brooks
fix: increase auth rate limit from 10 to 30 req/min
committed
Bryan Brooks
fix: profile redirect uses x-forwarded-proto behind proxy
committed
Bryan Brooks
fix: require discoverable credential for passkey registration
committed
Bryan Brooks
ci: retrigger deploy for v2.1.0
committed
Bryan Brooks
ci: retrigger deploy for v2.1.0
committed
Bryan Brooks
feat: user profile page and dark login theme
committed
Bryan Brooks
fix: CI deploy uses kubectl set image instead of rollout restart
committed
Bryan Brooks
fix: resolve all lint errors for CI
committed
Bryan Brooks
feat: passkey login on OIDC authorize page
committed
Bryan Brooks
Update docs: required secrets setup, security section, GHCR image
committed
Bryan Brooks
Security hardening: remove hardcoded secrets, fix XSS, flash-based secret display
committed
Bryan Brooks
fix: resolve lint errors blocking CI pipeline
committed
Bryan Brooks
fix: return descriptive 400 for unresolvable AT Protocol handles
committed
Bryan Brooks
docs: lean CLAUDE.md, rewrite README for OIDC, add skill commands
committed
Bryan Brooks
chore: remove stale dirs, fix wizard double-protocol bug, clean Dockerfile
committed
Bryan Brooks
docs: project checkpoint — update CLAUDE.md, CHANGELOG, deploy runbook, gitignore
committed
Bryan Brooks
fix: OIDC token exchange, client secret hashing, and userinfo handle resolution
committed
Bryan Brooks
feat: OIDC client management GUI, setup wizard, and auth regression tests
committed
Bryan Brooks
docs: add RCA for redirect_uri auth failure (2026-02-22)
committed
Bryan Brooks
fix: separate OAuth redirect_uri from app callback in legacy auth flow
committed
Bryan Brooks
fix: register OIDC/forward-auth redirect URIs in NodeOAuthClient
committed
Bryan Brooks
ci: re-trigger build for access control deployment
committed
Bryan Brooks
feat: add forward-auth access control and server-rendered admin dashboard
committed
Bryan Brooks
fix: add sentinel proxy-auth app for forward-auth OAuth flows
committed
Bryan Brooks
ci: re-trigger build for forward-auth deployment
committed
Bryan Brooks
feat: add forward-auth SSO gateway for protecting arbitrary services
committed
Bryan Brooks
fix: remove form-action CSP to allow Chrome OIDC redirects
committed
Bryan Brooks
fix: retry on transient bsky.social metadata errors, prevent double-submit
committed