kolaente c9b6d29383 fix(openid): copy oauth2 config before setting per-request redirect URL ...

The memory keyvalue store only shallow-copies Provider, so Oauth2Config
was shared between the cache and all requests. Concurrent callbacks
overwrote each other's RedirectURL, causing intermittent login failures.

2026-10-19 17:51:16 +02:00

..

ldap

feat(ldap): match users and groups by an immutable directory id

2026-10-19 13:42:19 +02:00

oauth2server

docs: add swagger annotations for the OAuth 2.0 endpoints (#3837)

2026-09-10 18:05:20 +00:00

openid

fix(openid): copy oauth2 config before setting per-request redirect URL

2026-10-19 17:51:16 +02:00

auth_context_test.go

perf(auth): reuse the api token owner from the request context

2026-09-06 16:40:57 +02:00

auth_test.go

fix(auth): send the refresh cookie with SameSite=Lax

2026-10-02 19:08:02 +02:00

auth.go

fix(auth): send the refresh cookie with SameSite=Lax

2026-10-02 19:08:02 +02:00