17ff1a01e3
feat(sso): add URL normalization and validation to all discovery URLs ( #6503 )
...
Co-authored-by: Paola Estefanía de Campos <paolaestefania.decampos@gmail.com >
Co-authored-by: Paola Estefanía de Campos <84341268+Paola3stefania@users.noreply.github.com >
Co-authored-by: Bereket Engida <Bekacru@gmail.com >
Co-authored-by: Bereket Engida <86073083+Bekacru@users.noreply.github.com >
2025-12-12 09:18:16 -08:00
Paola Estefanía de Campos and GitHub
90c597a9d2
feat(saml): assertion timestamp validation with per-provider clock skew ( #6706 )
2025-12-11 23:01:49 -08:00
57400bf2a0
feat(sso): add OIDC discovery ( #6395 )
...
Co-authored-by: Bereket Engida <Bekacru@gmail.com >
Co-authored-by: Bereket Engida <86073083+Bekacru@users.noreply.github.com >
2025-12-11 17:46:55 -08:00
Paola Estefanía de Campos and GitHub
dce3cda741
fix(saml): remove signature validation bypass ( #6682 )
2025-12-11 15:57:18 -08:00
Paola Estefanía de Campos and GitHub
50ffecbfad
feat(sso): add InResponseTo validation ( #6557 )
2025-12-11 15:57:00 -08:00
744f30d665
chore: add support for scoped endpoints ( #6275 )
...
Co-authored-by: Bereket Engida <86073083+Bekacru@users.noreply.github.com >
2025-12-11 12:22:12 -08:00
Jonathan Samines and GitHub
9233783428
chore: remove unused variables ( #6647 )
2025-12-09 13:51:35 -08:00
Paola Estefanía de Campos and GitHub
c56622b38f
fix(sso): deprecate trustEmailVerified ( #6616 )
2025-12-08 15:53:20 -08:00
Paola Estefanía de Campos and GitHub
6f2831163b
feat(sso): use domain verified flag to trust providers automatically
2025-12-08 13:12:14 -08:00
e8cc734db5
fix(sso): safely parse provider configs on registration ( #6550 )
...
Co-authored-by: Bereket Engida <Bekacru@gmail.com >
Co-authored-by: Bereket Engida <86073083+Bekacru@users.noreply.github.com >
2025-12-07 19:25:27 -08:00
Paola Estefanía de Campos and GitHub
69db13bcce
fix(saml): enforce trusted provider check ( #6551 )
2025-12-05 15:35:27 -08:00
868504f2c2
chore: hoist endpoint schemas ( #6283 )
...
Co-authored-by: Bereket Engida <86073083+Bekacru@users.noreply.github.com >
2025-12-04 12:48:10 -08:00
Alex Yang and GitHub
5cbe0a58e7
chore: enforce imports to use node: protocol ( #6461 )
2025-12-01 16:08:32 -08:00
Bereket Engida
b76945e2de
Revert "fix(sso): always use default SAML assertion consumer service URL ( #6069 )"
...
This reverts commit 041ebeb2f6
2025-11-29 23:09:56 -08:00
Bereket Engida and GitHub
041ebeb2f6
fix(sso): always use default SAML assertion consumer service URL ( #6069 )
2025-11-29 22:47:32 -08:00
Albert Putra Purnama and GitHub
edb090e0d5
chore(sso): support form-urlencoded for callback endpoint ( #6123 )
2025-11-20 05:20:06 +00:00
Albert Putra Purnama and GitHub
444c8e62f1
sso(fix): generate metadata on saml sign on ( #6118 )
2025-11-20 02:51:09 +00:00
Maxwell and GitHub
3396089f86
chore(sso): support form-urlencoded for acs endpoint ( #6098 )
2025-11-19 16:09:20 +00:00
Bereket Engida
179eabc298
chore(sso): should trust verified domains
2025-11-19 01:16:30 -08:00
da9657e53b
feat(sso): add domain verification for SSO providers ( #5910 )
...
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com >
2025-11-19 08:17:12 +00:00
Bereket Engida and GitHub
14128927b4
chore: upgrade to better-call to 1.2.28 ( #6090 )
2025-11-19 07:23:25 +00:00
Gautam Manchandani and GitHub
99e577f7e2
fix: genericOAuth and SSO ignore discoveryUrl for authorization ( #6057 )
...
Signed-off-by: GautamBytes <manchandanigautam@gmail.com >
2025-11-18 17:53:40 +00:00
Jonathan Samines and GitHub
57ee11a26f
chore(lint): enforce consistent import type style ( #6044 )
2025-11-17 21:11:39 +00:00
Jonathan Samines and GitHub
276ffd6e44
chore(sso): add support for custom field mapping ( #6047 )
2025-11-17 21:02:05 +00:00
4817a6e9a4
fix(openapi): add operationIds to routes ( #2107 )
...
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com >
Co-authored-by: cubic-dev-ai[bot] <191113872+cubic-dev-ai[bot]@users.noreply.github.com>
Co-authored-by: Bereket Engida <86073083+Bekacru@users.noreply.github.com >
Co-authored-by: TheUntraceable <73362400+TheUntraceable@users.noreply.github.com >
Co-authored-by: Bereket Engida <Bekacru@gmail.com >
2025-11-15 08:25:27 -08:00
Rob Bayliss and GitHub
7ed2805b76
fix(sso): export SSOProvider type ( #5996 )
2025-11-14 23:09:52 +00:00
Rob Bayliss and GitHub
7800aa5f7e
fix(sso): prevent server instance from leaking to client ( #5994 )
2025-11-14 21:08:21 +00:00
Arian Joyandeh and GitHub
eb45cfd7f6
fix(sso): respect disableImplicitSignUp in SAML callback ( #5966 )
2025-11-14 00:11:46 +00:00
David Hart and GitHub
f8b052ee01
fix(sso): use the internalAdapter for user queries to avoid skipping database hooks ( #5913 )
2025-11-11 21:19:01 +00:00
Jonathan Samines and GitHub
791abb26ad
chore(sso): refactor SSO plugin ( #5908 )
2025-11-11 18:45:01 +00:00
Alex Yang and GitHub
4b64499dd9
test: export getTestInstance ( #5791 )
2025-11-06 04:36:20 +00:00
Alex Yang and GitHub
cea5bf2464
feat: add request state ( #5742 )
2025-11-05 01:32:03 +00:00
Bereket Engida and GitHub
67aa5a1125
docs: add warning on trustEmailVerified config ( #5755 )
2025-11-04 19:19:46 +00:00
Alex Yang and GitHub
b6d405f75a
fix: add undefined type for optional property types ( #5654 )
2025-10-28 23:26:03 +00:00
Alex Yang and GitHub
938c2a7c31
chore: lint enable organize import ( #5556 )
2025-10-24 19:05:09 +00:00
Alex Yang and GitHub
f864b04283
refactor: share generic context during api endpoint ( #5290 )
2025-10-15 16:56:17 +00:00
6f23188a36
feat(sso): add option to provide login hint ( #5283 )
...
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
2025-10-15 02:48:02 +00:00
Bereket Engida and GitHub
f34a9733f0
fix(sso): OIDC scopes should fallback to provider scopes ( #5071 )
2025-10-03 11:52:45 -05:00
Yanqi Zong and GitHub
ddce2e9cf7
fix(sso): prevent duplicate SSO provider creation with same providerId ( #5033 )
2025-10-01 23:54:37 -07:00
d330ab8b9c
fix(sso): safe json parsing for saml/oidc configs ( #4858 )
...
Co-authored-by: Alex Yang <himself65@outlook.com >
2025-10-01 15:00:35 -07:00
Bereket Engida and Alex Yang
9818fb85ec
chore: misc update
2025-09-29 18:02:21 -07:00
Alex Yang
faea100685
Revert "chore: use zod v3 syntax ( #4851 )"
...
This reverts commit 7fa0c2dd5c
2025-09-25 14:01:21 -07:00
Dylan Vanmali and GitHub
e892a53b89
feat(sso): provide default service provider metadata ( #4866 )
2025-09-24 04:26:39 +00:00
Alex Yang and GitHub
7fa0c2dd5c
chore: use zod v3 syntax ( #4851 )
2025-09-23 20:27:24 +00:00
b3ead859e6
feat(sso): defaultSSO options and ACS endpoint ( #3660 )
...
Co-authored-by: Bereket Engida <Bekacru@gmail.com >
Co-authored-by: Bereket Engida <86073083+Bekacru@users.noreply.github.com >
2025-09-19 17:26:53 +00:00
Alex Yang and GitHub
bf05dec3aa
chore(sso,expo,stripe): fix devDependencies and peerDependencies ( #4295 )
2025-08-28 15:02:36 -07:00
99834437b0
fix: secondary storage should allow returning both string and parsed json ( #4076 )
...
* docs: hero section alignment with feature section on big screens (#4018 )
* fix: hero section alignment with feature section on big screens
* fix
---------
Co-authored-by: Bereket Engida <Bekacru@gmail.com >
* chore: fix broken testomnial link
* fix(sso): [⚠︎Security] - membership check should be required before allowing users to create sso for an organization
* chore: update sso docs
* chore: fix import typo
* docs: hero section alignment with feature section on big screens (#4018 )
* fix: hero section alignment with feature section on big screens
* fix
---------
Co-authored-by: Bereket Engida <Bekacru@gmail.com >
* chore: fix broken testomnial link
* fix(sso): [⚠︎Security] - membership check should be required before allowing users to create sso for an organization
* chore: update sso docs
* chore: fix import typo
* chore: release v1.3.7-beta.4
* chore: release v1.3.7
* support both json and string
* add test and type
* fix up docs
* fix test
* fix test
* fix type
---------
Co-authored-by: KinfeMichael Tariku <65047246+Kinfe123@users.noreply.github.com >
2025-08-18 21:08:39 -07:00
Alex Yang and GitHub
575070f605
chore: bump biome ( #3784 )
2025-08-04 13:48:54 -07:00
Nate Tewelde and GitHub
52695f0280
fix(sso): include mapping inside samlConfig payload ( #3548 )
2025-07-22 18:22:07 -07:00
dea6419e09
feat(sso): support disabling setting email verified from a provider ( #3551 )
...
* feat: support disabling setting email verified
* Update docs/content/docs/plugins/sso.mdx
Co-authored-by: cubic-dev-ai[bot] <191113872+cubic-dev-ai[bot]@users.noreply.github.com>
* fix: update account handling in SSO to support trusted providers
* default to not setting email verified
* docs: update documentation
* add attribute map
---------
Co-authored-by: cubic-dev-ai[bot] <191113872+cubic-dev-ai[bot]@users.noreply.github.com>
2025-07-22 18:19:25 -07:00
Alex YangandGitHub
Albert Putra PurnamaandGitHub
MaxwellandGitHub
Gautam ManchandaniandGitHub
Rob BaylissandGitHub
Arian JoyandehandGitHub
David HartandGitHub
Yanqi ZongandGitHub
Dylan VanmaliandGitHub
