Files

T

LeoVasanko af6d7e3a3f Instance-global OIDC provider; per-domain auth hosts with shared-host resolution

- DB.oidc is a single OIDC (one key, one client set); hosts are issuer
  aliases. OIDCCode drops its rp_id field; client CRUD is not keyed by
  domain.
- No cross-domain auth-host fallback: a domain without its own auth host
  uses its own hosts; several domains may share one auth host (nested
  rp-ids) with deterministic best-suffix resolution.
- '*' origin shorthand expands to '*.{rp-id}'; legacy wildcards convert
  as-is; related origins may point at/inside another domain's rp-id.
- Admin UI and docs updated to match.

2026-09-07 06:10:08 +00:00

auth

Instance-global OIDC provider; per-domain auth hosts with shared-host resolution

2026-09-07 06:10:08 +00:00

int

Added configurable timeout settings to paskia-js, used in our frontend as well. The default fetch timeout has been changed to 10s from prior 1s, but we maintain 1s for auth endpoints in internal use.

2026-04-29 20:23:38 +00:00

public

Missing theme file. Added favicon.

2026-01-31 00:25:38 +00:00

src

Instance-global OIDC provider; per-domain auth hosts with shared-host resolution