kolaente 4ae2e09301 fix(auth): reject API tokens at the OAuth authorize endpoint (GHSA-v3p6-34mc-hj7v)

2026-07-19 18:59:34 +02:00

..

scalar

…

admin_projects.go

feat: audit admin user and project mutations

2026-07-03 16:56:03 +00:00

admin_users.go

feat: audit admin user and project mutations

2026-07-03 16:56:03 +00:00

api_tokens.go

…

auth_login.go

chore(deps): replace vendored humaecho5 with upstream humaecho adapter (#3205)

2026-07-17 22:35:53 +02:00

auth_openid.go

fix(auth): build OIDC end-session URL with RP-Initiated Logout params (#2943)

2026-06-19 18:27:33 +02:00

auth_public.go

fix: dispatch pending events after user creation commits

2026-06-12 08:56:08 +00:00

auth_refresh.go

feat(api/v2): port refresh-token endpoint to /api/v2

2026-06-17 20:34:38 +00:00

avatar_upload.go

…

avatar.go

…

backgrounds.go

chore(deps): replace vendored humaecho5 with upstream humaecho adapter (#3205)

2026-07-17 22:35:53 +02:00

bot_users.go

…

buckets.go

feat(api/v2): add kanban bucket CRUD endpoints

2026-06-26 08:56:15 +00:00

bulk_task.go

feat(api): exchange rich-text fields as markdown on v2

2026-06-29 08:12:35 +02:00

caldav_tokens.go

…

docs.go

…

errors_test.go

…

errors.go

fix: interpolate dynamic values into translated error toasts

2026-07-18 13:41:15 +00:00

health.go

feat(auth): add OpenID provider availability monitoring and retry logic (#3145)

2026-07-10 17:52:01 +02:00

huma.go

chore(deps): replace vendored humaecho5 with upstream humaecho adapter (#3205)

2026-07-17 22:35:53 +02:00

info.go

chore(lint): suppress contextcheck on OIDC provider init call sites

2026-06-12 08:56:08 +00:00

label_task_bulk.go

…

label_tasks.go

…

labels.go

feat(api): exchange rich-text fields as markdown on v2

2026-06-29 08:12:35 +02:00

link_sharing.go

…

migration_csv.go

feat(api/v2): add the generic CSV importer on /api/v2

2026-06-12 08:51:19 +00:00

migration_file.go

feat(api/v2): add file migrators (vikunja-file, ticktick, wekan) on /api/v2

2026-06-12 08:51:19 +00:00

migration_oauth.go

…

notifications_feed.go

chore(deps): replace vendored humaecho5 with upstream humaecho adapter (#3205)

2026-07-17 22:35:53 +02:00

notifications.go

…

oauth.go

fix(auth): reject API tokens at the OAuth authorize endpoint (GHSA-v3p6-34mc-hj7v)

2026-07-19 18:59:34 +02:00

project_duplicate.go

feat(projects): make duplicating shares opt-in (#2932)

2026-06-19 10:15:58 +02:00

project_teams.go

…

project_users.go

…

project_views.go

…

projects.go

feat(api): exchange rich-text fields as markdown on v2

2026-06-29 08:12:35 +02:00

reactions.go

…

registry.go

feat(api): add v2 markdown conversion helpers

2026-06-29 08:12:35 +02:00

richtext.go

chore(deps): replace vendored humaecho5 with upstream humaecho adapter (#3205)

2026-07-17 22:35:53 +02:00

saved_filters.go

feat(api): exchange rich-text fields as markdown on v2

2026-06-29 08:12:35 +02:00

sessions.go

…

subscriptions.go

…

task_assignees_bulk.go

…

task_assignees.go

…

task_attachments.go

chore(deps): replace vendored humaecho5 with upstream humaecho adapter (#3205)

2026-07-17 22:35:53 +02:00

task_bucket.go

…

task_collection.go

feat(search): add explicit relevance sort field

2026-07-06 15:45:55 +00:00

task_comments.go

feat(api): exchange rich-text fields as markdown on v2

2026-06-29 08:12:35 +02:00

task_duplicate.go

…

task_position.go

…

task_relations.go

…

task_unread_status.go

…

tasks.go

feat(api): exchange rich-text fields as markdown on v2

2026-06-29 08:12:35 +02:00

team_members.go

…

teams.go

feat(api): exchange rich-text fields as markdown on v2

2026-06-29 08:12:35 +02:00

testing.go

feat(api/v2): add e2e testing-support endpoints on /api/v2

2026-06-17 12:13:50 +00:00

time_entries.go

refactor(events): pass context to DispatchPending directly

2026-06-12 08:56:08 +00:00

token_meta.go

feat(api/v2): add token-check, token-routes and link-share renew endpoints

2026-06-12 07:58:17 +00:00

types.go

…

user_deletion.go

…

user_export.go

chore(deps): replace vendored humaecho5 with upstream humaecho adapter (#3205)

2026-07-17 22:35:53 +02:00

user_search.go

refactor(user): share user-search logic between v1 and v2

2026-06-11 20:07:43 +00:00

user_settings.go

feat(audit): attribute failed logins to the originating request

2026-06-12 08:56:08 +00:00

user_totp.go

feat(api/v2): add totp qr code endpoint

2026-06-17 18:39:38 +00:00

user_webhooks.go

…

validation.go

…

webhook_events.go

feat(api/v2): add available webhook events endpoint

2026-06-11 20:07:43 +00:00

webhooks.go

…