James Smith
|
c5d3d65aea
|
remove unnecessary CSRF change from #5114
|
2025-11-28 11:06:15 +00:00 |
|
James Smith
|
ea6ada9617
|
Disable CSRF protection for omniauth callbacks
Just isn't needed there, probably should have always been off.
|
2025-11-28 09:08:08 +00:00 |
|
James Smith
|
10bfcbdaf4
|
rate limit omniauth callbacks
using the same rate as sessions controller
|
2025-11-26 17:17:55 +00:00 |
|
James Smith
|
9378c93078
|
OIDC: Don't match accounts by unverified emails
|
2025-11-26 15:40:18 +00:00 |
|
James Smith
|
613a25daf7
|
more useful omniauth error reporting
|
2024-10-16 12:18:26 +01:00 |
|
James Smith
|
f581b6ed8b
|
handle admin setup in forced OIDC mode
|
2024-10-15 16:38:18 +01:00 |
|
James Smith
|
3739d81662
|
add OIDC callback and user creation
|
2024-10-15 13:32:01 +01:00 |
|