Commit Graph
449 Commits
Author SHA1 Message Date
dependabot[bot]GitHubdependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>Taesu
bf0b5da173 chore(deps): bump @xmldom/xmldom from 0.9.10 to 0.9.12 (#11130)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Taesu <bytaesu@gmail.com>
2026-09-02 20:55:07 +00:00
TaesuandGitHub c0444dc979 fix: align OpenAPI required fields with Zod 4.5 (#11066) 2026-08-30 18:51:24 +00:00
TaesuandGitHub e2fb86b27e test(sso): align mock IdP with SAML redirect binding (#11058) 2026-08-29 20:11:38 +00:00
Gustavo ValverdeandGitHub 6a0a7cbcb1 fix(auth): preserve provider-scoped account identity (#10969) 2026-08-28 22:34:54 +00:00
better-release[bot]GitHubgithub-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
ba12fcdfa7 chore: release v1.7.2 (#10870)
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-08-26 18:53:57 +00:00
TaesuandGitHub 79904f0be8 fix(origin-check): support fragments in relative redirect URLs (#10983) 2026-08-25 10:12:21 +00:00
better-release[bot]andGitHub 2344536054 chore: release v1.7.1 (#10864) 2026-08-18 14:46:12 -04:00
TaesuandGitHub ccd57c2dcb docs(changelog): align v1.7 release notes with final behavior (#10846) 2026-08-17 18:53:06 -04:00
better-release[bot] f577ec5c76 chore: exit pre-release mode for v1.7.0 2026-08-17 19:52:57 +00:00
Gustavo Valverde 69258d1670 chore: sync main to next
Merge branch 'main' into next
2026-08-17 15:29:19 -04:00
better-release[bot]andGitHub e84ec5e76d chore: release v1.6.30 (#10840) 2026-08-17 15:05:06 -04:00
better-release[bot]andGitHub bc93b27542 chore: release v1.7.0-rc.6 (#10772) 2026-08-14 14:15:16 -04:00
better-release[bot]andGitHub 58c49eb97f chore: release v1.6.29 (#10809) 2026-08-14 14:15:00 -04:00
Taesu 80799e6931 chore: sync main to next 2026-08-14 09:19:43 +09:00
better-release[bot]GitHubgithub-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
86faaee69b chore: release v1.6.28 (#10796)
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-08-13 22:29:39 +00:00
better-release[bot]andGitHub acbe42128f chore: release v1.7.0-rc.5 (#10704) 2026-08-11 18:12:57 -04:00
Gustavo Valverde 1fa55595e8 test(sso): exercise provider pagination boundary 2026-08-11 15:11:30 -04:00
Gustavo Valverde 5071415398 fix(sso): harden domain organization assignment 2026-08-11 14:53:03 -04:00
Gustavo Valverde 970fd0cc9f test(sso): align legacy provider fixture 2026-08-11 14:15:27 -04:00
Gustavo Valverde 73d6f80e5b chore(sync): merge main into next 2026-08-11 14:14:49 -04:00
better-release[bot]andGitHub be47e9418b chore: release v1.6.27 (#10686) 2026-08-11 13:56:17 -04:00
999acbd41d Merge commit from fork
* fix(sso): bind domain verification to provider state

Complete domain verification with an atomic guarded transition keyed by the provider row, exact domain snapshot, and unverified state. Concurrent provider mutations now return a retryable conflict instead of applying stale DNS proof.

Document the conflict behavior and cover provider mutation, replacement, deletion, simultaneous verification, memory-adapter, and downstream trust cases.

* fix(sso): allow domain verification when the stored bit is null

* test(sso): assert the resolved DNS hostname outside the mock callback

* fix(sso): require verified domains for organization assignment

Use verified persisted provider domains and canonical verified user emails for domain-derived routing and organization membership. Keep explicit organization-bound SSO provisioning separate from domain trust.

* fix(sso): scope domain verification to organization assignment

* fix(sso): keep verified provider lookup internal

---------

Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com>
2026-08-11 13:50:45 -04:00
better-release[bot]andGitHub f41b7c7857 chore: release v1.7.0-rc.4 (#10677) 2026-08-04 20:22:07 -04:00
Gustavo Valverde 5af0b3b77e chore(sync): merge main into next 2026-08-04 18:34:05 -04:00
better-release[bot]andGitHub a16b30e843 chore: release v1.6.26 (#10521) 2026-08-04 17:15:45 -04:00
Gustavo ValverdeandGitHub 8bc28daf42 fix(core): preserve issuer-scoped account identities (#10668) 2026-08-04 13:47:09 -04:00
better-release[bot]andGitHub 8bb588dde2 chore: release v1.7.0-rc.3 (#10496) 2026-08-03 13:27:15 -04:00
Gustavo ValverdeandGitHub 26b194960f feat(scim): add managed connection catalog and runtime connection resolution (#10592) 2026-08-03 13:15:13 -04:00
Gustavo ValverdeandGitHub 59c4c832fc feat(sso): extend resolveUser to SAML and harden provider lifecycle (#10621) 2026-08-03 12:51:21 -04:00
dependabot[bot]GitHubdependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>Taesu
65b9f78e6b chore(deps): bump body-parser from 2.2.2 to 2.3.0 (#10471)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Taesu <166604494+bytaesu@users.noreply.github.com>
2026-07-25 08:26:55 +00:00
better-release[bot]andGitHub 07a646ea19 chore: release v1.6.25 (#10491) 2026-07-23 11:44:59 -04:00
better-release[bot]andGitHub cc708e51bc chore: release v1.7.0-rc.2 (#10327) 2026-07-22 15:51:41 -04:00
Gustavo Valverde 1dd09ed096 docs(sync): address merged documentation comments 2026-07-22 14:22:50 -04:00
Gustavo Valverde cd4eb5627f fix(sync): address behavioral review findings 2026-07-22 14:22:40 -04:00
Gustavo Valverde 47012469e8 test(sso): validate redirects through provider schema 2026-07-22 10:49:00 -04:00
Gustavo Valverde 73e2d2dd62 fix(sync): align tests with next contracts 2026-07-22 10:40:52 -04:00
Gustavo Valverde 558d2de0a7 chore(sync): merge main into next 2026-07-22 10:39:55 -04:00
Gustavo ValverdeandGitHub ed61b4798e feat(sso): add transactional OIDC user resolution (#10473) 2026-07-22 06:53:55 -04:00
better-release[bot]andGitHub 9a661c7b7a chore: release v1.6.24 (#10323) 2026-07-22 06:30:26 -04:00
c020a9d6a2 fix(sso): redirect idp initiated saml flows in split origin deployments (#10388)
Co-authored-by: Gustavo Valverde <g.valverde02@gmail.com>
2026-07-22 06:14:46 -04:00
Gustavo ValverdeandGitHub dbd302e422 feat(auth)!: scope accounts by issuer (#10403) 2026-07-16 17:24:34 +01:00
better-release[bot]andGitHub fb1dff141c chore: release v1.7.0-rc.1 (#10303) 2026-07-02 18:35:29 +01:00
Gustavo Valverde c02ea52953 chore(sync): merge main into next
Resolve the sync conflicts by keeping the next release train package versions, carrying the 1.6.23 stable changelog entries forward, and unioning the cspell word list.
2026-06-29 18:12:01 -04:00
better-release[bot]andGitHub 9dfceee140 chore: release v1.6.23 (#10260) 2026-06-29 18:04:39 -04:00
better-release[bot]andGitHub b7239f37de chore: release v1.7.0-rc.0 (#10254) 2026-06-26 23:12:46 +01:00
better-release[bot]andGitHub ba52913eed chore: release v1.7.0-beta.10 (#10173) 2026-06-26 17:59:41 +01:00
Gustavo Valverde 010bd65811 chore: resolve 10246 main-to-next sync conflicts 2026-06-26 13:54:08 +01:00
better-release[bot]andGitHub a90d061de7 chore: release v1.6.22 (#10245) 2026-06-26 13:43:23 +01:00
Gustavo Valverde f291e5ba74 fix: address sync review fallout 2026-06-26 08:09:34 +01:00
Gustavo Valverde cc1aed88d3 fix: address sync review feedback 2026-06-26 07:42:55 +01:00