letro/letro-authentication-service
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 1 Wiki Activity
4,807 Commits 2 Branches 1 Tag
d2a9e96388bdf22ef4e439fe86409ced00dfcf8a
Commit Graph

4807 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Quentin Gliech
d2a9e96388 build(deps): bump the tanstack-router group in /frontend with 3 updates (#4525) 2025-05-07 19:56:25 +02:00
Quentin Gliech
1566890989 build(deps): bump tokio from 1.44.2 to 1.45.0 (#4520) 2025-05-07 19:37:13 +02:00
Quentin Gliech
84c38c613d Hacky support for the /logout/all compatibility endpoint (#4504) 2025-05-07 19:32:09 +02:00
Quentin Gliech
e78590748e Adjust tokio metrics for tokio 1.45 2025-05-07 19:28:50 +02:00
Quentin Gliech
5209de8825 build(deps-dev): bump the graphql-codegen group in /frontend with 2 updates (#4524) 2025-05-07 19:26:02 +02:00
Quentin Gliech
5d701b9121 build(deps): bump minijinja-contrib from 2.9.0 to 2.10.2 (#4519) 2025-05-07 19:10:43 +02:00
Quentin Gliech
6a45b662a5 build(deps): bump rustls from 0.23.26 to 0.23.27 (#4518) 2025-05-07 19:10:36 +02:00
Quentin Gliech
37519a8f5c Don't automatically insert the openid scope on upstream providers (#4517) 2025-05-07 19:00:08 +02:00
dependabot[bot]
b51e20add4 build(deps): bump rustls from 0.23.26 to 0.23.27 
Bumps [rustls](https://github.com/rustls/rustls) from 0.23.26 to 0.23.27.
- [Release notes](https://github.com/rustls/rustls/releases)
- [Changelog](https://github.com/rustls/rustls/blob/main/CHANGELOG.md)
- [Commits](https://github.com/rustls/rustls/compare/v/0.23.26...v/0.23.27)

---
updated-dependencies:
- dependency-name: rustls
  dependency-version: 0.23.27
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-05-07 16:55:04 +00:00
dependabot[bot]
84aefb93da build(deps-dev): bump the graphql-codegen group 
Bumps the graphql-codegen group in /frontend with 2 updates: [@graphql-codegen/cli](https://github.com/dotansimha/graphql-code-generator/tree/HEAD/packages/graphql-codegen-cli) and [@graphql-codegen/client-preset](https://github.com/dotansimha/graphql-code-generator/tree/HEAD/packages/presets/client).


Updates `@graphql-codegen/cli` from 5.0.5 to 5.0.6
- [Release notes](https://github.com/dotansimha/graphql-code-generator/releases)
- [Changelog](https://github.com/dotansimha/graphql-code-generator/blob/master/packages/graphql-codegen-cli/CHANGELOG.md)
- [Commits](https://github.com/dotansimha/graphql-code-generator/commits/@graphql-codegen/cli@5.0.6/packages/graphql-codegen-cli)

Updates `@graphql-codegen/client-preset` from 4.8.0 to 4.8.1
- [Release notes](https://github.com/dotansimha/graphql-code-generator/releases)
- [Changelog](https://github.com/dotansimha/graphql-code-generator/blob/master/packages/presets/client/CHANGELOG.md)
- [Commits](https://github.com/dotansimha/graphql-code-generator/commits/@graphql-codegen/client-preset@4.8.1/packages/presets/client)

---
updated-dependencies:
- dependency-name: "@graphql-codegen/cli"
  dependency-version: 5.0.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: graphql-codegen
- dependency-name: "@graphql-codegen/client-preset"
  dependency-version: 4.8.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: graphql-codegen
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-05-07 16:54:14 +00:00
Quentin Gliech
44629401b4 build(deps): bump rustls-pki-types from 1.11.0 to 1.12.0 (#4521) 2025-05-07 18:53:35 +02:00
Quentin Gliech
0300fb495c build(deps-dev): bump the vite group in /frontend with 2 updates (#4522) 2025-05-07 18:52:46 +02:00
Quentin Gliech
c3acee11e5 build(deps): bump i18next from 25.0.2 to 25.1.1 in /frontend in the i18next group (#4523) 2025-05-07 18:52:30 +02:00
Quentin Gliech
c46122b841 cargo fmt 2025-05-07 18:51:51 +02:00
Quentin Gliech
d797a5b14d Explain why nonce is optional now 
Co-authored-by: reivilibre <oliverw@element.io>
 2025-05-07 18:50:38 +02:00
dependabot[bot]
bafb70ebec build(deps): bump the tanstack-router group in /frontend with 3 updates 
Bumps the tanstack-router group in /frontend with 3 updates: [@tanstack/react-router](https://github.com/TanStack/router/tree/HEAD/packages/react-router), [@tanstack/react-router-devtools](https://github.com/TanStack/router/tree/HEAD/packages/react-router-devtools) and [@tanstack/router-plugin](https://github.com/TanStack/router/tree/HEAD/packages/router-plugin).


Updates `@tanstack/react-router` from 1.119.0 to 1.120.2
- [Release notes](https://github.com/TanStack/router/releases)
- [Commits](https://github.com/TanStack/router/commits/v1.120.2/packages/react-router)

Updates `@tanstack/react-router-devtools` from 1.119.1 to 1.120.2
- [Release notes](https://github.com/TanStack/router/releases)
- [Commits](https://github.com/TanStack/router/commits/v1.120.2/packages/react-router-devtools)

Updates `@tanstack/router-plugin` from 1.119.0 to 1.120.2
- [Release notes](https://github.com/TanStack/router/releases)
- [Commits](https://github.com/TanStack/router/commits/v1.120.2/packages/router-plugin)

---
updated-dependencies:
- dependency-name: "@tanstack/react-router"
  dependency-version: 1.120.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: tanstack-router
- dependency-name: "@tanstack/react-router-devtools"
  dependency-version: 1.120.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: tanstack-router
- dependency-name: "@tanstack/router-plugin"
  dependency-version: 1.120.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: tanstack-router
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-05-07 13:57:41 +00:00
dependabot[bot]
a12e57122a build(deps): bump i18next in /frontend in the i18next group 
Bumps the i18next group in /frontend with 1 update: [i18next](https://github.com/i18next/i18next).


Updates `i18next` from 25.0.2 to 25.1.1
- [Release notes](https://github.com/i18next/i18next/releases)
- [Changelog](https://github.com/i18next/i18next/blob/master/CHANGELOG.md)
- [Commits](https://github.com/i18next/i18next/compare/v25.0.2...v25.1.1)

---
updated-dependencies:
- dependency-name: i18next
  dependency-version: 25.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: i18next
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-05-07 13:56:51 +00:00
dependabot[bot]
42e5d66480 build(deps-dev): bump the vite group in /frontend with 2 updates 
Bumps the vite group in /frontend with 2 updates: [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) and [vite-plugin-graphql-codegen](https://github.com/danielwaltz/vite-plugin-graphql-codegen).


Updates `vite` from 6.3.4 to 6.3.5
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v6.3.5/packages/vite)

Updates `vite-plugin-graphql-codegen` from 3.5.0 to 3.6.0
- [Release notes](https://github.com/danielwaltz/vite-plugin-graphql-codegen/releases)
- [Changelog](https://github.com/danielwaltz/vite-plugin-graphql-codegen/blob/main/CHANGELOG.md)
- [Commits](https://github.com/danielwaltz/vite-plugin-graphql-codegen/compare/v3.5.0...v3.6.0)

---
updated-dependencies:
- dependency-name: vite
  dependency-version: 6.3.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: vite
- dependency-name: vite-plugin-graphql-codegen
  dependency-version: 3.6.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: vite
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-05-07 13:56:41 +00:00
dependabot[bot]
354e08cd85 build(deps): bump rustls-pki-types from 1.11.0 to 1.12.0 
Bumps [rustls-pki-types](https://github.com/rustls/pki-types) from 1.11.0 to 1.12.0.
- [Release notes](https://github.com/rustls/pki-types/releases)
- [Commits](https://github.com/rustls/pki-types/compare/v/1.11.0...v/1.12.0)

---
updated-dependencies:
- dependency-name: rustls-pki-types
  dependency-version: 1.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-05-07 13:46:05 +00:00
dependabot[bot]
c25424c1a9 build(deps): bump tokio from 1.44.2 to 1.45.0 
Bumps [tokio](https://github.com/tokio-rs/tokio) from 1.44.2 to 1.45.0.
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](https://github.com/tokio-rs/tokio/compare/tokio-1.44.2...tokio-1.45.0)

---
updated-dependencies:
- dependency-name: tokio
  dependency-version: 1.45.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-05-07 13:45:36 +00:00
dependabot[bot]
b375ca68b6 build(deps): bump minijinja-contrib from 2.9.0 to 2.10.2 
Bumps [minijinja-contrib](https://github.com/mitsuhiko/minijinja) from 2.9.0 to 2.10.2.
- [Release notes](https://github.com/mitsuhiko/minijinja/releases)
- [Changelog](https://github.com/mitsuhiko/minijinja/blob/main/CHANGELOG.md)
- [Commits](https://github.com/mitsuhiko/minijinja/compare/2.9.0...2.10.2)

---
updated-dependencies:
- dependency-name: minijinja-contrib
  dependency-version: 2.10.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-05-07 13:45:10 +00:00
Quentin Gliech
4d0bce9382 Make the default scope on upstream providers config openid 2025-05-07 15:34:30 +02:00
Quentin Gliech
955bd28590 Don't generate and send a nonce for non-OIDC-compliant auth requests 2025-05-07 15:34:27 +02:00
Quentin Gliech
67f7d7cb8d Don't always insert the openid scope in upstream OAuth 2.0 requests 2025-05-07 15:25:50 +02:00
Quentin Gliech
e77b532fa9 Fix the Swagger UI not working when MAS is mounted on a prefix (#4515) 2025-05-07 14:57:27 +02:00
Quentin Gliech
3ccf858e5a Sample traces based on the parent (#4514) 2025-05-07 14:53:52 +02:00
Quentin Gliech
d6198c1bda Suppress warning with Jaeger propagator when the header is unset (#4513) 2025-05-07 14:53:40 +02:00
Quentin Gliech
125857feb1 Allow the X-Requested-With header in CORS on the OAuth endpoints 2025-05-07 14:50:03 +02:00
Quentin Gliech
f8c7a218f1 Make the security schemes relative in the static OpenAPI spec 2025-05-07 14:20:21 +02:00
Quentin Gliech
95094453e5 Use absolute URLs in the OAuth 2.0 security scheme in the API spec 2025-05-07 14:05:44 +02:00
Quentin Gliech
f9896cc122 Forward the login_hint upstream. (#4512) 2025-05-07 12:23:49 +02:00
Doug
5a93bf69ec Update upstream_oauth2.providers docs. 2025-05-07 11:14:10 +01:00
Doug
8123a7dffd Update copyright header 
sqlx migrate/prepare are both still happy.
 2025-05-07 10:26:30 +01:00
Quentin Gliech
1c57bca18d build(deps-dev): bump the vitest group in /frontend with 2 updates (#4502) 2025-05-07 11:22:42 +02:00
Doug
a826b99319 Update the login schema docs. 2025-05-07 10:21:40 +01:00
Quentin Gliech
1ad2c269a9 build(deps): bump axum from 0.8.3 to 0.8.4 in the axum group (#4485) 2025-05-07 11:16:19 +02:00
dependabot[bot]
91974739e3 build(deps-dev): bump the vitest group in /frontend with 2 updates 
Bumps the vitest group in /frontend with 2 updates: [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) and [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest).


Updates `@vitest/coverage-v8` from 3.1.2 to 3.1.3
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Commits](https://github.com/vitest-dev/vitest/commits/v3.1.3/packages/coverage-v8)

Updates `vitest` from 3.1.2 to 3.1.3
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Commits](https://github.com/vitest-dev/vitest/commits/v3.1.3/packages/vitest)

---
updated-dependencies:
- dependency-name: "@vitest/coverage-v8"
  dependency-version: 3.1.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: vitest
- dependency-name: vitest
  dependency-version: 3.1.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: vitest
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-05-07 09:16:12 +00:00
Quentin Gliech
6b11b2e404 build(deps): bump sha2 from 0.10.8 to 0.10.9 (#4486) 2025-05-07 11:15:39 +02:00
Quentin Gliech
04a3c171e1 build(deps): bump the tanstack-query group in /frontend with 2 updates (#4487) 2025-05-07 11:15:25 +02:00
Quentin Gliech
b5a2961fe6 build(deps-dev): bump happy-dom from 17.4.4 to 17.4.6 in /frontend (#4488) 2025-05-07 11:15:15 +02:00
Quentin Gliech
2541ebc44a build(deps): bump psl from 2.1.105 to 2.1.106 (#4501) 2025-05-07 11:15:04 +02:00
Quentin Gliech
fc8de06168 build(deps-dev): bump knip from 5.51.1 to 5.54.1 in /frontend (#4509) 2025-05-07 11:14:44 +02:00
Quentin Gliech
bb42eea9f4 build(deps): bump minijinja from 2.9.0 to 2.10.2 (#4510) 2025-05-07 11:14:29 +02:00
Quentin Gliech
e063394974 Log the trace ID in the log line only if the span is sampled 2025-05-07 10:56:19 +02:00
Quentin Gliech
a6ac8d88fc Sample traces based on the parent span if available 2025-05-07 10:53:33 +02:00
Quentin Gliech
72bb36e84a Suppress warning with Jaeger propagator when the header is unset 2025-05-07 10:32:47 +02:00
Doug
03d6fa0485 Fix database snapshot. 2025-05-07 09:17:28 +01:00
Doug
b16492a62c Generate the schema (which fixes a typo amongst other things 🤦‍♂️) 2025-05-06 18:03:53 +01:00
Doug
8da6aa4134 Add missing parameter. 2025-05-06 17:54:57 +01:00
Doug
7f91c8948b Add a configuration for forwarding the login hint to the upstream provider. 2025-05-06 17:50:33 +01:00