atauth
AtAuth
Star 7
Fork 0
Watch

Commits on 6ab88749a7ae3456f3b63bf381df76acb7e7c151

Bryan Brooks
fix: Express 5 req.params type safety, restore CI pipeline
committed
Bryan Brooks
deps: upgrade simplewebauthn v13, better-sqlite3 v12, patch updates
committed
Bryan Brooks
chore: simplify node_modules gitignore pattern
committed
Bryan Brooks
docs: fix Quick Start, docker-compose env passthrough, HOMELAB
committed
Bryan Brooks
docs: rewrite Quick Start with domain setup and reverse proxy
committed
Bryan Brooks
chore: remove Claude Code files from repo, add to gitignore
committed
Bryan Brooks
refactor: move CLAUDE.md details into slash command skills
committed
Bryan Brooks
docs: update project docs, add audit logging and input validation
committed
Bryan Brooks
test: add OIDC endpoint and passkey service tests
committed
Bryan Brooks
fix: dockerignore pattern for recursive test file exclusion
committed
Bryan Brooks
chore: bump version to 2.2.0 and add missing test files
committed
Bryan Brooks
chore: sanitize for FOSS release
committed
Bryan Brooks
ci: retrigger deploy
committed
Bryan Brooks
ci: retrigger deploy after runner restart
committed
Bryan Brooks
fix: return descriptive 400 for unresolvable AT Protocol handles
committed
Bryan Brooks
feat: add 10 OIDC app presets to setup wizard
committed
Bryan Brooks
fix: increase auth rate limit from 10 to 30 req/min
committed
Bryan Brooks
fix: profile redirect uses x-forwarded-proto behind proxy
committed
Bryan Brooks
fix: require discoverable credential for passkey registration
committed
Bryan Brooks
ci: retrigger deploy for v2.1.0
committed
Bryan Brooks
ci: retrigger deploy for v2.1.0
committed
Bryan Brooks
feat: user profile page and dark login theme
committed
Bryan Brooks
fix: CI deploy uses kubectl set image instead of rollout restart
committed
Bryan Brooks
fix: resolve all lint errors for CI
committed
Bryan Brooks
feat: passkey login on OIDC authorize page
committed
Bryan Brooks
Update docs: required secrets setup, security section, GHCR image
committed
Bryan Brooks
Security hardening: remove hardcoded secrets, fix XSS, flash-based secret display
committed
Bryan Brooks
fix: resolve lint errors blocking CI pipeline
committed
Bryan Brooks
fix: return descriptive 400 for unresolvable AT Protocol handles
committed
Bryan Brooks
docs: lean CLAUDE.md, rewrite README for OIDC, add skill commands
committed
Bryan Brooks
chore: remove stale dirs, fix wizard double-protocol bug, clean Dockerfile
committed
Bryan Brooks
docs: project checkpoint — update CLAUDE.md, CHANGELOG, deploy runbook, gitignore
committed
Bryan Brooks
fix: OIDC token exchange, client secret hashing, and userinfo handle resolution
committed
Bryan Brooks
feat: OIDC client management GUI, setup wizard, and auth regression tests
committed
Bryan Brooks
docs: add RCA for redirect_uri auth failure (2026-02-22)
committed
Bryan Brooks
fix: separate OAuth redirect_uri from app callback in legacy auth flow
committed
Bryan Brooks
fix: register OIDC/forward-auth redirect URIs in NodeOAuthClient
committed
Bryan Brooks
ci: re-trigger build for access control deployment
committed
Bryan Brooks
feat: add forward-auth access control and server-rendered admin dashboard
committed
Bryan Brooks
fix: add sentinel proxy-auth app for forward-auth OAuth flows
committed
Bryan Brooks
ci: re-trigger build for forward-auth deployment
committed
Bryan Brooks
feat: add forward-auth SSO gateway for protecting arbitrary services
committed
Bryan Brooks
fix: remove form-action CSP to allow Chrome OIDC redirects
committed
Bryan Brooks
fix: retry on transient bsky.social metadata errors, prevent double-submit
committed
Bryan Brooks
fix: sanitize colons in handles, improve error message
committed
Bryan Brooks
ci: trigger rebuild (previous build hung)
committed
Bryan Brooks
fix: use native form POST for OIDC login (fixes iOS Safari)
committed
Bryan Brooks
fix: sanitize Bluesky handles and improve login error messages
committed
Bryan Brooks
fix: use req.is('json') instead of req.accepts('json') for content negotiation
committed
Bryan Brooks
fix: OIDC login form uses fetch instead of form POST for iOS Safari
committed
Bryan Brooks
ci: add Matrix notifications for build status
committed
Bryan Brooks
fix: avoid recursive chown in Dockerfile (overlay2+ZFS perf issue)
committed
Bryan Brooks
ci: retrigger ATAuth build+deploy (unstick queued job)
committed
Bryan Brooks
Fix remaining ESLint unused-vars errors
committed
Bryan Brooks
ci: retrigger with updated kubeconfig
committed
Bryan Brooks
Retrigger CI with updated kubeconfig
committed
Bryan Brooks
Fix ESLint unused-vars errors in gateway
committed
Bryan Brooks
Add Gitea Actions CI/CD workflow for DO deployment
committed
Bryan Brooks
docs: update deployment docs for DigitalOcean migration
committed
Bryan Brooks
Allow HTTP redirects for Tailscale internal domains
committed