atauth
AtAuth
Star 7
Fork 0
Watch

Commits on a7363893c2cf0a32d9f5b6408d01e79229697c73

Bryan Brooks
fix: increase auth rate limit from 10 to 30 req/min
committed
Bryan Brooks
fix: profile redirect uses x-forwarded-proto behind proxy
committed
Bryan Brooks
fix: require discoverable credential for passkey registration
committed
Bryan Brooks
ci: retrigger deploy for v2.1.0
committed
Bryan Brooks
ci: retrigger deploy for v2.1.0
committed
Bryan Brooks
feat: user profile page and dark login theme
committed
Bryan Brooks
fix: CI deploy uses kubectl set image instead of rollout restart
committed
Bryan Brooks
fix: resolve all lint errors for CI
committed
Bryan Brooks
feat: passkey login on OIDC authorize page
committed
Bryan Brooks
Update docs: required secrets setup, security section, GHCR image
committed
Bryan Brooks
Security hardening: remove hardcoded secrets, fix XSS, flash-based secret display
committed
Bryan Brooks
fix: resolve lint errors blocking CI pipeline
committed
Bryan Brooks
fix: return descriptive 400 for unresolvable AT Protocol handles
committed
Bryan Brooks
docs: lean CLAUDE.md, rewrite README for OIDC, add skill commands
committed
Bryan Brooks
chore: remove stale dirs, fix wizard double-protocol bug, clean Dockerfile
committed
Bryan Brooks
docs: project checkpoint — update CLAUDE.md, CHANGELOG, deploy runbook, gitignore
committed
Bryan Brooks
fix: OIDC token exchange, client secret hashing, and userinfo handle resolution
committed
Bryan Brooks
feat: OIDC client management GUI, setup wizard, and auth regression tests
committed
Bryan Brooks
docs: add RCA for redirect_uri auth failure (2026-02-22)
committed
Bryan Brooks
fix: separate OAuth redirect_uri from app callback in legacy auth flow
committed
Bryan Brooks
fix: register OIDC/forward-auth redirect URIs in NodeOAuthClient
committed
Bryan Brooks
ci: re-trigger build for access control deployment
committed
Bryan Brooks
feat: add forward-auth access control and server-rendered admin dashboard
committed
Bryan Brooks
fix: add sentinel proxy-auth app for forward-auth OAuth flows
committed
Bryan Brooks
ci: re-trigger build for forward-auth deployment
committed
Bryan Brooks
feat: add forward-auth SSO gateway for protecting arbitrary services
committed
Bryan Brooks
fix: remove form-action CSP to allow Chrome OIDC redirects
committed
Bryan Brooks
fix: retry on transient bsky.social metadata errors, prevent double-submit
committed
Bryan Brooks
fix: sanitize colons in handles, improve error message
committed
Bryan Brooks
ci: trigger rebuild (previous build hung)
committed
Bryan Brooks
fix: use native form POST for OIDC login (fixes iOS Safari)
committed
Bryan Brooks
fix: sanitize Bluesky handles and improve login error messages
committed
Bryan Brooks
fix: use req.is('json') instead of req.accepts('json') for content negotiation
committed
Bryan Brooks
fix: OIDC login form uses fetch instead of form POST for iOS Safari
committed
Bryan Brooks
ci: add Matrix notifications for build status
committed
Bryan Brooks
fix: avoid recursive chown in Dockerfile (overlay2+ZFS perf issue)
committed
Bryan Brooks
ci: retrigger ATAuth build+deploy (unstick queued job)
committed
Bryan Brooks
Fix remaining ESLint unused-vars errors
committed
Bryan Brooks
ci: retrigger with updated kubeconfig
committed
Bryan Brooks
Retrigger CI with updated kubeconfig
committed
Bryan Brooks
Fix ESLint unused-vars errors in gateway
committed
Bryan Brooks
Add Gitea Actions CI/CD workflow for DO deployment
committed
Bryan Brooks
docs: update deployment docs for DigitalOcean migration
committed
Bryan Brooks
Allow HTTP redirects for Tailscale internal domains
committed
Bryan Brooks
Add comprehensive unit and E2E tests for OIDC provider
committed
Bryan Brooks
Fix TypeScript errors in OIDC callback flow
committed
Bryan Brooks
Fix OIDC callback flow for AT Protocol OAuth completion
committed
Bryan Brooks
fix: add urlencoded body parser for form submissions
committed
Bryan Brooks
feat: add login page to OIDC authorize flow
committed
Bryan Brooks
fix: use named wildcard for admin SPA fallback route
committed
Bryan Brooks
feat: Add OIDC provider, passkeys, MFA, and admin UI
committed
Bryan Brooks
fix: use single quotes for SQLite datetime('now') keyword
committed
Bryan Brooks
fix: replace unstable is_multiple_of with modulo check
committed
Bryan Brooks
Bump version to 1.3.0 v1.3.0
committed
Cache8063
Leverage Express 5 features and enable projectService (#10)
committed
Cache8063
Migrate to Express 5 and Helmet 8 (#9)
committed
Cache8063
Migrate to ESLint 9 with flat config (#8)
committed
Cache8063
Update dependencies to latest stable versions (#7)
committed
Cache8063
Add TypeScript tests and CHANGELOG (#3)
committed
Bryan Brooks
Update documentation for v1.2.0
committed