11 Commits (d688914b2864791eeadbf21c882608632875f17c)

Author	SHA1	Message	Date
memoclaw	92d937b1aa	feat: replace auto-increment ID with UID for identity provider resource names (#5687) ... Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>	4 months ago
Johnny	7932f6d0d0	refactor: user auth improvements (#5360)	6 months ago
Johnny	1a9bd32cf1	feat(auth): add PKCE support and enhance OAuth security ... Implements critical OAuth 2.0 security improvements to protect against authorization code interception attacks and improve provider compatibility: - Add PKCE (RFC 7636) support with SHA-256 code challenge/verifier - Fix access token extraction to use standard field instead of Extra() - Add OAuth error parameter handling (access_denied, invalid_scope, etc.) - Maintain backward compatibility for non-PKCE flows This brings the OAuth implementation up to modern security standards as recommended by Auth0, Okta, and the OAuth 2.0 Security Best Current Practice (RFC 8252). Backend changes: - Add code_verifier parameter to ExchangeToken with PKCE support - Use token.AccessToken for better provider compatibility - Update proto definition with optional code_verifier field Frontend changes: - Generate cryptographically secure PKCE parameters - Include code_challenge in authorization requests - Handle and display OAuth provider errors gracefully - Pass code_verifier during token exchange 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <noreply@anthropic.com>	7 months ago
johnnyjoy	1fffc41f79	feat: sliding expiration for user sessions	1 year ago
Steven	42d1650c6d	chore: tweak auth service	1 year ago
Johnny	9b15936873	refactor: clean unused fields	1 year ago
Steven	5821bb7a65	chore: update auth service	1 year ago
Johnny	741fe35c2a	refactor: rename session methods in auth service	1 year ago
Steven	d71fd2f84a	refactor: auth service	1 year ago
johnnyjoy	ca79990679	refactor: merge sign in requests	1 year ago
Steven	1b291422e7	refactor: api version	2 years ago