kolaente d879cb5c19 fix(ldap): keep the login when storing the synced avatar fails ...

Address pr-swarm finding: a busy decode budget made StoreAvatarFile fail
the whole LDAP login with 503, while OIDC skips the avatar.

2026-10-20 23:05:30 +02:00

..

ldap

fix(ldap): keep the login when storing the synced avatar fails

2026-10-20 23:05:30 +02:00

oauth2server

fix(auth): refuse email-unconfirmed accounts on every credential path

2026-10-20 15:13:02 +02:00

openid

refactor(imageutils): queue decodes on the caller's context

2026-10-20 23:05:30 +02:00

auth_context_test.go

perf(auth): reuse the api token owner from the request context

2026-09-06 16:40:57 +02:00

auth_test.go

fix(auth): send the refresh cookie with SameSite=Lax

2026-10-02 19:08:02 +02:00

auth.go

fix(auth): reject user JWTs whose session was revoked on the HTTP path

2026-10-20 15:13:02 +02:00