Copilot
70ff047588
fix(avatar): recover gracefully from broken avatar cache ( #1379 )
2025-09-02 14:03:58 +00:00
Copilot
c7a26d81fe
fix(auth): do not panic with invalid openid provider configuration ( #1354 )
2025-08-31 07:17:50 +00:00
Copilot
5ca637a7e6
feat(auth): add oauth require availability configuration on startup ( #1358 )
2025-08-30 22:15:20 +00:00
kolaente
a81a3ee0e5
feat!: rename right to permission ( #1277 )
2025-08-13 11:05:05 +02:00
kolaente
da0f6fb366
feat(auth): allow passing custom settings links to user account via openid claims
2025-08-03 13:25:32 +02:00
kolaente
de917467cb
fix(openid): manually fetch providers
...
Partially reverts fcdcdcf46ahttps://github.com/go-vikunja/vikunja/issues/1165
2025-07-28 11:40:09 +02:00
kolaente
bbd3567e43
chore: add debug logging around provider failure
...
https://github.com/go-vikunja/vikunja/issues/1165
2025-07-24 16:00:03 +02:00
kolaente
7243a10fb2
fix(openid): check different provider types
...
Related to https://github.com/go-vikunja/vikunja/issues/1165
2025-07-23 15:40:51 +02:00
kolaente
2b497e6265
fix: pass pointer when fetching provider
...
Resolves https://github.com/go-vikunja/vikunja/issues/1165
2025-07-23 11:09:09 +02:00
Tobias
a31255707e
fix "null" in project views ( #1158 )
...
Co-authored-by: kolaente <k@knt.li >
2025-07-22 17:43:04 +00:00
kolaente
ad0cf7a13c
fix: improve ldap sanitization ( #1155 )
2025-07-21 21:06:38 +00:00
kolaente
ca83ad1f98
feat: move to slog for logging
2025-07-21 18:15:39 +02:00
kolaente
a5591c1603
fix: correctly cache unsplash background
...
Resolves
https://vikunja.sentry.io/issues/6753151793/events/3d8773d79b9c4da0bf65140e4b7617b4/
2025-07-18 18:38:12 +02:00
kolaente
c3fd659851
fix: correctly return cached intitals avatar
...
Resolves https://vikunja.sentry.io/issues/6752872121/events/92ff6a64c4b64aa3aecc6973611bd449/
2025-07-18 18:38:12 +02:00
kolaente
566657c54a
fix: correctly return cached provider
2025-07-18 18:38:12 +02:00
kolaente
45e7f6e316
fix: upload avatar caching
2025-07-18 18:38:12 +02:00
kolaente
fcdcdcf46a
feat: use keyvalue.Remember where it makes sense
2025-07-17 16:19:13 +02:00
kolaente
c7a98386c2
feat: add keyvalue.Remember function
2025-07-17 16:19:13 +02:00
Tobias
ecc95e9139
fix: panic on restoring with numeric position fields ( #1089 )
...
Co-authored-by: kolaente <k@knt.li >
2025-07-15 15:44:21 +00:00
kolaente
4da4bf69ca
fix(background): validate unsupported formats and show error message ( #1123 )
2025-07-15 13:21:48 +02:00
Dominik Pschenitschni
342bbd6192
fix: correct comments
2025-07-02 17:46:21 +02:00
kolaente
59130766e8
fix(avatar): fallback to username when no name is set
2025-06-27 14:30:33 +02:00
kolaente
99bc065272
feat(user): use name for initals avatar, not username
...
For external auth providers, the username might be randomly generated,
which results in a random initial - this is unexpected and confusing for
users.
2025-06-27 14:13:49 +02:00
kolaente
4f8a2b0d38
chore(user): refactor invalidating upload avatar cache
2025-06-27 14:07:22 +02:00
kolaente
0ecbd9e1a3
feat(user): add avatar cache flushing ( #1041 )
2025-06-27 14:01:43 +02:00
kolaente
ae92822ee0
feat: add prefix key support to keyvalue store ( #1038 )
...
feat: add prefix key operations to keyvalue store
2025-06-27 11:05:37 +00:00
kolaente
17b8d20e7b
fix(migration): reset buckets before creating related tasks so that they are actually created ( #1015 )
2025-06-25 14:03:44 +02:00
Weijie Zhao
a214d68a44
feat(auth): sync avatar from OpenID providers ( #821 )
2025-06-16 15:59:31 +02:00
kolaente
6671ce38a8
chore: rename API test suites ( #938 )
2025-06-13 08:23:17 +00:00
kolaente
da95463bb2
fix(migration): detect header lines in csv file when importing from TickTick ( #937 )
2025-06-13 07:45:54 +00:00
Dominik Pschenitschni
296577a875
fix: correct license header references ( #882 )
...
See originals:
- https://www.gnu.org/licenses/agpl-3.0.txt
- https://www.gnu.org/licenses/gpl-3.0.txt
2025-06-10 12:18:38 +02:00
Weijie Zhao
00c4148f05
feat(auth): add ForceUserInfo option to OpenID provider ( #797 )
...
Problem:
When using Casdoor as an OpenID provider, there's an inconsistency between the user information in the JWT token and the UserInfo endpoint. The token contains the user's unique ID in the `name` field, while the UserInfo endpoint correctly returns the user's display name.
Solution:
This PR adds a new `ForceUserInfo` option to the OpenID provider configuration. When enabled, it forces the use of the UserInfo endpoint to retrieve user information instead of relying on claims from the ID token.
Impact:
- Default behavior remains unchanged (backward compatible)
- New option allows administrators to force using UserInfo endpoint data
- Particularly useful for providers like Casdoor that don't fully comply with OIDC standards
Related:
I've opened an issue in the Casdoor repository (https://github.com/casdoor/casdoor/issues/3806 ) to discuss the root cause. However, changing Casdoor's token structure might cause significant compatibility issues for existing integrations, so it's unclear if this can be fixed at the provider level. This PR provides a workaround in Vikunja that doesn't affect existing functionality.
2025-05-20 08:06:34 +00:00
renovate[bot]
4a75f7d4da
chore(deps): update golangci/golangci-lint-action action to v7 ( #462 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: kolaente <k@knt.li >
2025-04-02 09:28:56 +02:00
kolaente
7803fe8aef
fix(avatar): use keyvalue store to cache gravatar instead of map
...
Resolves https://community.vikunja.io/t/docker-crash-concurrent-map-writes-google-login/3454
2025-03-30 16:24:34 +02:00
kolaente
6847f44058
chore(openid): add more debug logging when retrieving token
2025-03-29 19:24:07 +01:00
kolaente
4ea3c01b5f
chore: add more debug logging when returning error
2025-03-29 18:21:34 +01:00
kolaente
13d4e0e00d
chore(utils): remove deprecated MakeRandomString function
2025-03-24 16:52:46 +01:00
kolaente
4d41a1bd9b
feat(kanban): create To-Do, Doing, Done buckets when creating a new kanban view
2025-03-21 19:16:52 +01:00
kolaente
d522d40773
fix(migration): do not fail when an attachment is too large
...
Resolves https://vikunja.sentry.io/issues/6389417364/events/d79bdea146b54a9dace8c81e3f787975/
2025-03-21 18:03:27 +01:00
kolaente
23d2814b94
fix(migration): check if the provided file is a valid csv before importing
2025-03-21 17:53:05 +01:00
kolaente
d19a93dece
fix(migration): check if uploaded csv is empty
2025-03-21 17:48:08 +01:00
kolaente
e3f006c527
fix(i18n): add missing translations
2025-03-20 17:41:45 +01:00
kolaente
5a93379d81
fix(ldap): update user name and email during login
2025-03-20 17:24:00 +01:00
kolaente
d585de77a4
fix(ldap): crop avatar when syncing
2025-03-20 17:19:58 +01:00
kolaente
164f2eab9d
feat(ldap): also look for username only when checking group membership
2025-03-19 22:16:12 +01:00
kolaente
f4b9a9cccd
feat(ldap): make member id attribute configurable
2025-03-19 22:15:50 +01:00
kolaente
e12ebfebed
feat(ldap): sync avatar from ldap
2025-03-18 18:28:54 +01:00
kolaente
26c7ceaed4
chore(avatar): decouple upload from web handler
2025-03-18 18:28:54 +01:00
kolaente
732431773d
fix(i18n): remove duplicate api strings
2025-03-18 18:23:47 +01:00
kolaente
99213c66ee
chore(openid): use general external team sync
2025-03-18 16:36:00 +00:00
