-
Notifications
You must be signed in to change notification settings - Fork 19
All issues
Issue creation is restricted in this repository
Issues
is:issue state:open
is:issue state:open
Search results
An indeterminate commit in signing-key rotation invites a retry that deletes a key still validating live tokens
bugSomething isn't workingSomething isn't workinggoPull requests that update Go codePull requests that update Go codesecuritySecurity issue or hardeningSecurity issue or hardeningStatus: Open.#371 In leodip/goiabada;[Core refactor 16/16] Move remaining authserver-only utilities and close the core refactor
enhancementNew feature or requestNew feature or requestgoPull requests that update Go codePull requests that update Go codeStatus: Open.#360 In leodip/goiabada;- Status: Open.#331 In leodip/goiabada;
BackfillLowercaseEmails scans the whole users table at every startup, forever
enhancementNew feature or requestNew feature or requestStatus: Open.#289 In leodip/goiabada;go-chi/cors wraps one Handler call whose interesting half is already ours
dependenciesPull requests that update a dependency filePull requests that update a dependency fileenhancementNew feature or requestNew feature or requestgoPull requests that update Go codePull requests that update Go codeStatus: Open.#280 In leodip/goiabada;PUT /api/v1/admin/clients/{id}/redirect-uris can commit half a redirect URI list under a 500
bugSomething isn't workingSomething isn't workinggoPull requests that update Go codePull requests that update Go codeStatus: Open.#264 In leodip/goiabada;openapi.yaml is verified only against this repository's own source, so nothing proves it can generate a client
enhancementNew feature or requestNew feature or requestgithub_actionsPull requests that update GitHub Actions codePull requests that update GitHub Actions codegoPull requests that update Go codePull requests that update Go codeStatus: Open.#261 In leodip/goiabada;Security: a client-scoped revocation cannot reach ROPC refresh grants, and PKCE-optional is broken on SQLite
bugSomething isn't workingSomething isn't workinggoPull requests that update Go codePull requests that update Go codesecuritySecurity issue or hardeningSecurity issue or hardeningStatus: Open.#259 In leodip/goiabada;Feature: recovery codes for accounts with OTP enabled
enhancementNew feature or requestNew feature or requestgoPull requests that update Go codePull requests that update Go codesecuritySecurity issue or hardeningSecurity issue or hardeningStatus: Open.#257 In leodip/goiabada;user_session_clients and user_consents have no unique constraint on their natural keys, so a concurrent write duplicates the row
bugSomething isn't workingSomething isn't workinggoPull requests that update Go codePull requests that update Go codeStatus: Open.#249 In leodip/goiabada;Ceremony robustness and dead code: two dead states, dead middleware, a dead prefill, a nil dereference, a 500 on the Back button, and a double-code window
bugSomething isn't workingSomething isn't workinggoPull requests that update Go codePull requests that update Go codeStatus: Open.#248 In leodip/goiabada;Security: a cross-site request to /auth/authorize destroys ceremony state before anything is validated
bugSomething isn't workingSomething isn't workinggoPull requests that update Go codePull requests that update Go codesecuritySecurity issue or hardeningSecurity issue or hardeningStatus: Open.#246 In leodip/goiabada;