All pull requests

Pull requests

• Per-OAuth2-client device session limits

  #5999·bxdxnn opened Sep 23, 2026·

  ·
  1

  2

• Allow password reset while signed in

  #5985·odelcroi opened Sep 18, 2026Contributor·

  ·

• Handle the whole password registration on /register

  T-Enhancement
  #5983·sandhose opened Sep 18, 2026Member·2/5·

  ·
  10

• Support MSC4198 login_hint in device auth flow

  #5982·tonkku107 opened Sep 17, 2026Contributor·

  ·

• Interactive feedback for username availability in the registration form

  T-Enhancement
  #5977·sandhose opened Sep 15, 2026Member·4/5·

  ·
  1

• Rate limit and slow down device code token requests

  T-Enhancement
  #5973·hughns opened Sep 14, 2026Member·

  ·
  7

• WIP: very experimental invite links

  T-Enhancement
  #5971·sandhose opened Sep 10, 2026Member·5/5·

  ·
  1

• Remember which username was chosen when doing a registration through a social-login provider

  T-Enhancement
  #5969·sandhose opened Sep 10, 2026Member·1/5·

  ·
  9

• Remove the "Application Services login" warning page

  #5962·barodeur opened Sep 3, 2026Contributor·

  ·
  1

• WIP: Login method hint

  #5957·sandhose opened Sep 2, 2026Member·

  ·
  1

• Strict Content Security Policy

  #5916·sandhose opened Aug 10, 2026Member·

  ·
  1

• Add endpoint PUT /users/:id/displayname

  #5910·V02460 opened Aug 6, 2026Contributor·

  ·

• Redirect login to chosen Upstream IDP if specified via URL parameter

  #5882·justjanne opened Jul 30, 2026·

  ·
  1

• Validate downloaded translations against the English source

  A-I18nT-Task
  #5864·sandhose opened Jul 13, 2026Member·

  ·
  2

• Escape whole translations by default on server-side templates

  A-I18nT-Task
  #5863·sandhose opened Jul 13, 2026Member·

  ·
  10

• Provide more specific password login failure reasons in metrics

  #5862·reivilibre opened Jul 10, 2026Contributor·

  ·
  2

• feat(OAuth): delete all upstream links for a deactivated user

  #5722·defaultdino opened Jun 3, 2026Contributor·

  ·
  1

  2

• feat(consent): allow config option to skip consent for given static clients

  #5608·defaultdino opened Apr 3, 2026Contributor·

  ·
  1

  3

• Render the registration form with React

  T-Enhancement
  #5591·sandhose opened Mar 30, 2026Member·3/5·

  ·
  1

• Make the redirect back to the client more robust

  #5515·sandhose opened Feb 23, 2026Member·

  ·
  1

• WIP: token exchange to get back the upstream IDP access token

  #5504·sandhose opened Feb 17, 2026Member·

  ·
  2

• document loading config values from the environment - closes #5363

  #5375·klaernie opened Dec 24, 2025·

  ·
  4

• Update reverse-proxy.md

  #4954·jackedproxy opened Aug 27, 2025·

  ·
  1

• Document steps to prepare test database

  #4746·AndrewFerr opened Jul 4, 2025Member·

  ·
  1

• Initial Grafana dashboard

  #4306·sandhose opened Mar 28, 2025Member·

  ·
  2