3 Commits

Include renames

Author	SHA1	Message	Date
Bernd StorathandGitHub	e7ea65a898	various improvements (#2671) ... * improve oauth config logic * expire pending login * move sort to backend	2026-06-18 11:14:20 +02:00
3 people	032347648d	improve security against injection (#2669) ... * improve security against injection * fix shell injection through ipv4, ipv6 address Co-authored-by: 7megaumka7 <116706490+7megaumka7@users.noreply.github.com> --------- Co-authored-by: 7megaumka7 <116706490+7megaumka7@users.noreply.github.com>	2026-06-16 16:00:25 +02:00
3 people	ac547bbf7c	feat: oauth integration (#2659) ... * feat: add Google OAuth login support (#2625) * 🔧 Add login via google * 🔧 Update code style and docs * Add fix for db migrate * 🔧 Update docker-compose * 🔧 Fix sqlite" * 🔧 Update docker-compose * ⚰️ Remove environments * 🔧 Fix: remove ensureGoogleIdColumn workaround from sqlite.ts * 🔧 Remove space * move oauth section * add openid client * wip make oauth more generic * properly allow multiple providers * fix type import * github login flow * adjust github logo with theme * move docs to own page * nullable password, prevent timing attack this prevents timing attacks by always checking hash even if there is none prevents using basic auth if 2fa is enabled * support generic oidc * add ability to set password for oidc users this allows oidc users to add password login cant be removed after * move password login route move password login route from /api/session to /api/auth/password align with oauth * unique index on oauth * link/unlink logic * improve docs * support allowed domains * support auto register * refactoring * disable pw auth * move 2fa to its own page * 2fa for oauth, rework 2fa system * fix design, fix link Closes #2650 * add auto launch * improve docs * improvements --------- Co-authored-by: Daniel Molenda <dm@fotc.com>	2026-06-12 13:38:32 +02:00