Commits
Branch selector
User selector
Commit history
Commits on Jul 27, 2026
Refuse an identity provider that advertises cleartext endpoints (#1158)
Show description for 3cb7851authoredDecouple `Authentication` from `Configuration` (#1157)
Show description for 59ec96eauthoredRead every secret through `Authentication` (#1156)
Show description for e7a60aeauthoredBind sealed values to their purpose and fold sessions into `Authentication` (#1155)
Show description for 23da68eauthored
Commits on Jul 26, 2026
Introduce a new `Authentication::Path` abstraction (#1154)
Show description for e4dd0b5authored
Commits on Jul 25, 2026
Fully adopt the upstream OIDC module and serve the SSO sandbox over TLS (#1153)
Show description for 3f78057authoredStart adopting the upstream OIDC module (#1152)
Show description for aaed110authoredUpgrade all Sourcemeta dependencies (#1151)
Show description for 20b90b4authored
Commits on Jul 22, 2026
Make use of the new `vendor/core` OAuth upstream module (#1150)
Show description for 7bd92d6authored
Commits on Jul 21, 2026
Upgrade all Sourcemeta dependencies (#1149)
Show description for 6fb7969authored
Commits on Jul 19, 2026
Refactor and isolate OAuth / OIDC helpers in `enterprise/authentication` (#1148)
Show description for 311eb19authored
Commits on Jul 18, 2026
Add Playwright tests around SSO (#1147)
Show description for 43e17deauthoredRefine the SSO login page design (#1146)
Show description for 83474e0authoredRemove authentication dead code (#1145)
Show description for 1ed1936authoredAdd some more logic SSO re-direction tests (#1144)
Show description for 1d4f596authoredServe the interactive login page in place at the denied URL (#1143)
Show description for 866f195authoredRender the login page independently of the requested path (#1142)
Show description for e4e9124authored
Commits on Jul 17, 2026
Add a headless rebuild CLI test (#1141)
Show description for d87ef4cauthoredGenerate an SSO login HTML page per directory (#1140)
Show description for 51f63f5authoredExpose policy name, title, and type in directory listings (#1139)
Show description for 57d53e9authoredCorrectly fallback to OIDC nested policy paths (#1137)
Show description for bc928ccauthoredSupport a human readable `title` in OIDC policies (#1136)
Show description for 37bc023authoredImplement SSO post-login page re-direction (#1135)
Show description for f13abddauthored
Commits on Jul 16, 2026
Redirect unauthenticated browsers to SSO login at the gate (#1134)
Show description for de36784authoredDocument the oidc authentication policy type (#1133)
Show description for 7e7603eauthoredProve interactive SSO end to end with Keycloak sandboxes (#1132)
Show description for 79c2e43authoredAllow login SSO actions to be accessible without authentication (#1131)
Show description for 95bd827authoredSupport configuring interactive OIDC authentication policies (#1130)
Show description for eff74abauthoredImplement the interactive callback endpoint for SSO (#1129)
Show description for 784dacfauthored
Commits on Jul 15, 2026
Implement a login authentication endpoint (#1128)
Show description for b25998aauthoredIntroduce an OIDC connector library in preparation for SSO (#1127)
Show description for 821b224authoredThread session cookies through every admission surface for SSO (#1126)
Show description for ec276b7authoredAdmit interactive sessions at the route gate in preparation for SSO (#1125)
Show description for 0059ba5authoredImplement a `/self/v1/auth/logout` endpoint for SSO (#1124)
Show description for de532d0authoredMount the Sourcemeta Extension vocabulary in the public instance (#1123)
Show description for a0bd09eauthored