Commit Graph
7 Commits
Author SHA1 Message Date
James Smith c5d3d65aea remove unnecessary CSRF change from #5114 2025-11-28 11:06:15 +00:00
James Smith ea6ada9617 Disable CSRF protection for omniauth callbacks
Just isn't needed there, probably should have always been off.
2025-11-28 09:08:08 +00:00
James Smith 10bfcbdaf4 rate limit omniauth callbacks
using the same rate as sessions controller
2025-11-26 17:17:55 +00:00
James Smith 9378c93078 OIDC: Don't match accounts by unverified emails 2025-11-26 15:40:18 +00:00
James Smith 613a25daf7 more useful omniauth error reporting 2024-10-16 12:18:26 +01:00
James Smith f581b6ed8b handle admin setup in forced OIDC mode 2024-10-15 16:38:18 +01:00
James Smith 3739d81662 add OIDC callback and user creation 2024-10-15 13:32:01 +01:00