Claude fc9c21915d feat(auth): enforce OpenID Connect issuer uniqueness across providers ...

Detect when two configured OIDC providers resolve to the same issuer URL
at startup and halt with a fatal error, preventing team sync data
corruption caused by ambiguous (external_id, issuer) matching.

Also adds duplicate issuer detection to the doctor service diagnostics
and comprehensive tests with mock OIDC discovery servers.

2026-03-30 22:41:50 +00:00

..

caldav

fix(caldav): parse timestamps in configured timezone

2026-03-03 12:18:48 +01:00

cmd

refactor(user): export IsErrUserStatusError for use across packages

2026-03-23 12:06:16 +00:00

config

feat(plugins): add plugin config options

2026-03-30 20:44:46 +00:00

cron

fix: correct license header references (#882)

2025-06-10 12:18:38 +02:00

db

test: add integration tests for CalDAV API token auth

2026-03-30 12:09:53 +00:00

doctor

feat(auth): enforce OpenID Connect issuer uniqueness across providers

2026-03-30 22:41:50 +00:00

e2etests

feat: rename ServiceJWTSecret to ServiceSecret with deprecation (#2502)

2026-03-30 12:07:01 +02:00

events

feat: add InitEventsForTesting and Unfake for real event dispatch in tests

2026-03-05 12:49:27 +01:00

files

refactor: replace afero with FileStorage interface

2026-03-20 10:59:44 +01:00

health

feat: introduce shared health check logic (#1073)

2025-07-02 21:01:41 +00:00

i18n

test: add tests for API token expiry notifications and cron

2026-03-30 12:28:15 +00:00

initialize

feat(auth): enforce OpenID Connect issuer uniqueness across providers

2026-03-30 22:41:50 +00:00

log

fix(log): write each log category to its own file (#2206)

2026-02-08 15:22:58 +00:00

mail

fix(mail): disable queue when mailer disabled (#2069)

2026-01-08 15:51:31 +01:00

metrics

fix: correct license header references (#882)

2025-06-10 12:18:38 +02:00

migration

feat: add OAuth 2.0 authorization code model and migration

2026-03-27 23:05:04 +00:00

models

test: add tests for API token expiry notifications and cron

2026-03-30 12:28:15 +00:00

modules

feat(auth): enforce OpenID Connect issuer uniqueness across providers

2026-03-30 22:41:50 +00:00

notifications

test: add tests for API token expiry notifications and cron

2026-03-30 12:28:15 +00:00

plugins

test(plugins): add yaegi plugin integration tests

2026-03-30 20:44:46 +00:00

red

fix: correct license header references (#882)

2025-06-10 12:18:38 +02:00

routes

refactor: use embed fs for redoc UI and update to latest version

2026-03-30 15:09:54 +00:00

swagger

[skip ci] Updated swagger docs

2026-03-28 23:53:53 +00:00

user

fix: add ORDER BY to ListUsers query for deterministic ordering

2026-03-27 23:05:04 +00:00

utils

chore(lint): suppress gosec false positives on SSRF-safe HTTP client calls

2026-03-23 16:34:22 +00:00

version

fix: correct license header references (#882)

2025-06-10 12:18:38 +02:00

web

feat(handlers): dispatch pending events after transaction commit

2026-03-03 12:46:34 +01:00

webtests

test: verify caldav permission group appears in /routes

2026-03-30 12:09:53 +00:00

yaegi_symbols

test(plugins): add yaegi plugin integration tests

2026-03-30 20:44:46 +00:00