oauth
a01dd7e3d7
🎉 Release 5.2.0
2026-02-26 17:40:56 +00:00
oauth
31109dc906
Merge branch 'origin/main' into 'next-release/main'
2026-02-26 17:40:56 +00:00
dependabot[bot]
6cdf229979
build(deps): bump github.com/kovidgoyal/imaging from 1.8.19 to 1.8.20
...
Bumps [github.com/kovidgoyal/imaging](https://github.com/kovidgoyal/imaging ) from 1.8.19 to 1.8.20.
- [Release notes](https://github.com/kovidgoyal/imaging/releases )
- [Commits](https://github.com/kovidgoyal/imaging/compare/v1.8.19...v1.8.20 )
---
updated-dependencies:
- dependency-name: github.com/kovidgoyal/imaging
dependency-version: 1.8.20
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-02-26 18:38:29 +01:00
oauth
c42ce31ae1
🎉 Release 5.2.0
2026-02-26 13:47:01 +00:00
oauth
d82f3e8d7f
Merge branch 'origin/main' into 'next-release/main'
2026-02-26 13:47:00 +00:00
Mahdi Baghbani
d7cb432b4d
fix(ocm): allow insecure tls for wayf discovery ( #2404 )
...
* fix(ocm): allow insecure tls for wayf discovery
Signed-off-by: Mahdi Baghbani <mahdi-baghbani@azadehafzar.io >
2026-02-26 14:44:38 +01:00
oauth
3b7f3ea648
🎉 Release 5.2.0
2026-02-25 13:06:08 +00:00
oauth
2412b12e43
Merge branch 'origin/main' into 'next-release/main'
2026-02-25 13:06:08 +00:00
Florian Schade
b69b9cd569
fix: simplify subject.session key parsing
2026-02-25 14:02:09 +01:00
Florian Schade
e8ecbd7af1
refactor: make the logout mode private
2026-02-25 14:02:09 +01:00
Florian Schade
fd614eacf1
fix: use base64 record keys to prevent separator clashes with subjects or sessionIds that contain a dot
2026-02-25 14:02:09 +01:00
Florian Schade
910298aa05
chore: change naming
2026-02-25 14:02:09 +01:00
Florian Schade
7350050a05
test: add more backchannellogout tests
2026-02-25 14:02:09 +01:00
Florian Schade
f72e3f1e32
chore: cleanup backchannel logout pr for review
2026-02-25 14:02:09 +01:00
Florian Schade
0c62c45494
enhancement: document idp side-effects
2026-02-25 14:02:09 +01:00
Florian Schade
f6553498f6
enhancement: finalize backchannel logout
2026-02-25 14:02:09 +01:00
Christian Richter
6a0fd89475
refactor deletion
...
Co-authored-by: Jörn Dreyer <j.dreyer@opencloud.eu >
Co-authored-by: Michael Barz <m.barz@opencloud.eu >
Signed-off-by: Christian Richter <c.richter@opencloud.eu >
2026-02-25 14:02:09 +01:00
Christian Richter
cb38aaab16
create mapping in cache for subject => sessionid
...
Signed-off-by: Christian Richter <c.richter@opencloud.eu >
2026-02-25 14:02:09 +01:00
Christian Richter
762062bfa3
add mapping to backchannel logout for subject => sessionid
...
Signed-off-by: Christian Richter <c.richter@opencloud.eu >
2026-02-25 14:02:09 +01:00
Christian Richter
291265afb0
add additional validation to logout token
...
Signed-off-by: Christian Richter <c.richter@opencloud.eu >
Co-authored-by: Michael Barz <m.barz@opencloud.eu >
2026-02-25 14:02:09 +01:00
oauth
131e1fb518
🎉 Release 5.2.0
2026-02-24 00:14:39 +00:00
oauth
6dba9bf64d
Merge branch 'origin/main' into 'next-release/main'
2026-02-24 00:14:38 +00:00
opencloudeu
49a018e973
[tx] updated from transifex
2026-02-24 00:12:39 +00:00
Ralf Haferkamp
372bb04ee8
chore(idp): Bump dependencies
...
The axios bump addresses CVE-2025-7783
2026-02-23 09:38:12 +01:00
oauth
7ed88774b2
🎉 Release 5.2.0
2026-02-23 08:34:48 +00:00
oauth
bb8347af64
Merge branch 'origin/main' into 'next-release/main'
2026-02-23 08:34:47 +00:00
dependabot[bot]
b7eb6f768d
build(deps): bump github.com/grpc-ecosystem/grpc-gateway/v2
...
Bumps [github.com/grpc-ecosystem/grpc-gateway/v2](https://github.com/grpc-ecosystem/grpc-gateway ) from 2.27.7 to 2.28.0.
- [Release notes](https://github.com/grpc-ecosystem/grpc-gateway/releases )
- [Commits](https://github.com/grpc-ecosystem/grpc-gateway/compare/v2.27.7...v2.28.0 )
---
updated-dependencies:
- dependency-name: github.com/grpc-ecosystem/grpc-gateway/v2
dependency-version: 2.28.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-02-23 09:34:09 +01:00
dependabot[bot]
e13ba4af06
build(deps): bump github.com/open-policy-agent/opa from 1.13.1 to 1.13.2
...
Bumps [github.com/open-policy-agent/opa](https://github.com/open-policy-agent/opa ) from 1.13.1 to 1.13.2.
- [Release notes](https://github.com/open-policy-agent/opa/releases )
- [Changelog](https://github.com/open-policy-agent/opa/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-policy-agent/opa/compare/v1.13.1...v1.13.2 )
---
updated-dependencies:
- dependency-name: github.com/open-policy-agent/opa
dependency-version: 1.13.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-02-23 09:31:49 +01:00
oauth
c7f2945341
🎉 Release 5.2.0
2026-02-23 06:37:09 +00:00
oauth
07ec21e7a7
Merge branch 'origin/main' into 'next-release/main'
2026-02-23 06:37:07 +00:00
Jannik Stehle
2a2e882a59
Merge pull request #2377 from opencloud-eu/feat/web-adjust-surface-colors
...
feat(web): change surface colors to more modern ones
2026-02-23 07:34:59 +01:00
oauth
ee56c55456
🎉 Release 5.2.0
2026-02-22 00:15:09 +00:00
oauth
6ab1d477ca
Merge branch 'origin/main' into 'next-release/main'
2026-02-22 00:15:09 +00:00
opencloudeu
42e9c27174
[tx] updated from transifex
2026-02-22 00:13:15 +00:00
Jannik Stehle
02d73157c1
feat(web): change surface colors to more modern ones
2026-02-20 16:13:32 +01:00
oauth
e06ab0261f
🎉 Release 5.2.0
2026-02-19 17:29:28 +00:00
oauth
26a47558ad
Merge branch 'origin/main' into 'next-release/main'
2026-02-19 17:29:27 +00:00
dependabot[bot]
801a4ce8c4
build(deps): bump google.golang.org/grpc from 1.78.0 to 1.79.1
...
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go ) from 1.78.0 to 1.79.1.
- [Release notes](https://github.com/grpc/grpc-go/releases )
- [Commits](https://github.com/grpc/grpc-go/compare/v1.78.0...v1.79.1 )
---
updated-dependencies:
- dependency-name: google.golang.org/grpc
dependency-version: 1.79.1
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-02-19 18:27:12 +01:00
oauth
f8d50fb092
🎉 Release 5.2.0
2026-02-19 16:07:44 +00:00
oauth
52cf1aa729
Merge branch 'origin/main' into 'next-release/main'
2026-02-19 16:07:43 +00:00
dependabot[bot]
74ff47e4c2
build(deps): bump github.com/onsi/ginkgo/v2 from 2.28.0 to 2.28.1
...
Bumps [github.com/onsi/ginkgo/v2](https://github.com/onsi/ginkgo ) from 2.28.0 to 2.28.1.
- [Release notes](https://github.com/onsi/ginkgo/releases )
- [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md )
- [Commits](https://github.com/onsi/ginkgo/compare/v2.28.0...v2.28.1 )
---
updated-dependencies:
- dependency-name: github.com/onsi/ginkgo/v2
dependency-version: 2.28.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-02-19 17:04:06 +01:00
oauth
1524ef6271
🎉 Release 5.2.0
2026-02-19 12:30:21 +00:00
oauth
7dcfef0506
Merge branch 'origin/main' into 'next-release/main'
2026-02-19 12:30:21 +00:00
dependabot[bot]
5851db3d93
build(deps): bump go.opentelemetry.io/contrib/zpages
...
Bumps [go.opentelemetry.io/contrib/zpages](https://github.com/open-telemetry/opentelemetry-go-contrib ) from 0.64.0 to 0.65.0.
- [Release notes](https://github.com/open-telemetry/opentelemetry-go-contrib/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-go-contrib/compare/zpages/v0.64.0...zpages/v0.65.0 )
---
updated-dependencies:
- dependency-name: go.opentelemetry.io/contrib/zpages
dependency-version: 0.65.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-02-19 13:27:49 +01:00
oauth
475f983634
🎉 Release 5.2.0
2026-02-19 12:19:27 +00:00
oauth
778bd51479
Merge branch 'origin/main' into 'next-release/main'
2026-02-19 12:19:26 +00:00
Ralf Haferkamp
6dde2839df
fix(oidc_auth): Fix userinfo cache expiration logic
...
When the userinfo claims store in the usercache is found to be expired,
do not return an error but ignore the cached entry and force a
re-verification of the access token (either via parsing the JWT again or
via a UserInfo lookup).
This is required for setups with non-JWT access tokes where the expiry
date set in the cached claims does not reflect the actual token expiry,
but just the CacheTTL.
Fixes : #1493
2026-02-19 13:17:17 +01:00
oauth
afdd36ebec
🎉 Release 5.2.0
2026-02-19 11:18:34 +00:00
oauth
2834e465ca
Merge branch 'origin/main' into 'next-release/main'
2026-02-19 11:18:33 +00:00
Ralf Haferkamp
212846f2f4
fix(idp): Remove kpop dependency
...
The built package (https://download.kopano.io/community/kapp:/kpop-2.7.2.tgz )
seems to be no longer available and upstream lico already switched away
from it quite a while ago.
Fixes : #2364
2026-02-19 12:16:30 +01:00