kolaenteandTink eff486337f feat(ldap): query only the user's groups during group sync ...

Support {userdn} and {username} placeholders in auth.ldap.groupsyncfilter.
When present, every matching group is a membership and the member
attribute is not fetched, so the cost scales with the user's own
memberships and nested AD groups can be resolved with
LDAP_MATCHING_RULE_IN_CHAIN. Filters without a placeholder keep the
previous client-side member matching.

The group search now uses paged results in both modes so directories
with more groups than the server's size limit no longer fail the login.

2026-10-19 13:42:19 +02:00

..

ldap

feat(ldap): query only the user's groups during group sync

2026-10-19 13:42:19 +02:00

oauth2server

docs: add swagger annotations for the OAuth 2.0 endpoints (#3837)

2026-09-10 18:05:20 +00:00

openid

refactor(utils): rename NewHTTPClient to NewUnguardedHTTPClient

2026-09-30 18:26:56 +02:00

auth_context_test.go

perf(auth): reuse the api token owner from the request context

2026-09-06 16:40:57 +02:00

auth_test.go

fix(auth): send the refresh cookie with SameSite=Lax

2026-10-02 19:08:02 +02:00

auth.go

fix(auth): send the refresh cookie with SameSite=Lax

2026-10-02 19:08:02 +02:00