All pull requests

Pull requests

• fix(login): don't show sign-up when account-verify fails with 419/5xx

  #178·romanetar opened Oct 16, 2026Contributor·

  ·
  2

• fix(login): show validation error for malformed email in login form

  #177·romanetar opened Oct 14, 2026Contributor·

  ·
  2

• fix(user): persist email/bio change for Ham/Spam users on first attempt

  #176·romanetar opened Oct 13, 2026Contributor·

  ·
  2

• feat(oauth2): add "Not you? Switch account" to consent screen

  #175·smarcet opened Oct 12, 2026Collaborator·

  ·
  5

  

• feat(mfa): add idp:reset-2fa command

  #171·romanetar opened Oct 7, 2026Contributor·3/3·3 of 4 tasks·

  ·
  2

• feat(mfa): add IRecoveryCodeService::disableTwoFactor

  #169·romanetar opened Oct 7, 2026Contributor·2/3·2 of 3 tasks·

  ·
  2

• fix(oauth2): do not render client redirect_uri as a link on the consent page

  #167·romanetar opened Oct 5, 2026Contributor·

  ·
  2

• feat(mfa): add idp:enforce-admin-2fa command

  #166·romanetar opened Oct 5, 2026Contributor·1/3·2 of 3 tasks·

  ·
  2

• feat(oauth2): restrict OAUTH2 Console to configured groups (default deny)

  #165·romanetar opened Oct 2, 2026Contributor·

  ·
  3

• fix(oauth2): return 412 instead of 500 on duplicate api scope group name

  #164·smarcet opened Oct 2, 2026Collaborator·

  ·
  2

• fix(auth): logout revokes the session an id_token_hint points at

  #163·romanetar opened Sep 29, 2026Contributor·

  ·
  2

• fix(auth): keep the pending OAuth2/OpenID request across the web logout

  #162·smarcet opened Sep 25, 2026Collaborator·

  ·
  8

  

• feat(2fa): trusted devices management UI and revoke endpoints

  #160·romanetar opened Sep 25, 2026Contributor·

  ·
  3

• fix(oauth2): guard null id_token_hint signing algorithm in processUserHint

  #159·smarcet opened Sep 22, 2026Collaborator·

  ·
  9

  

• feat(auth): update signup page UI and policy

  #155·mulldug opened Aug 13, 2026Collaborator·

  ·
  19

• chore(deps): bump pinned dependencies to clear security advisories

  security
  #153·smarcet opened Aug 12, 2026Collaborator·

  ·
  9

  

• feat(auth): implement Facebook data deletion callback and backfill command

  #150·smarcet opened Aug 7, 2026Collaborator·

  ·
  22

• feat(auth): update password reset page UI and policy

  #149·mulldug opened Jul 30, 2026Collaborator·

  ·
  27

• feat: redesign email verification success page

  #141·romanetar opened Jun 9, 2026Contributor·

  ·
  5

• fix: resolve session overlap when following email profile links

  #140·romanetar opened Jun 8, 2026Contributor·

  ·
  5

• feat: verification confirmation email style update

  #139·romanetar opened Jun 4, 2026Contributor·

  ·
  6

• feat: welcome email style update

  #138·romanetar opened Jun 4, 2026Contributor·

  ·
  2

• feat: verification email style update

  #137·romanetar opened Jun 4, 2026Contributor·

  ·
  11

• Feature | Harden login captcha gate by replacing request body counter with server-side session counter

  #132·matiasperrone-exo opened May 18, 2026Contributor·

  ·
  22

  

• fix(oauth2): allow HTTP origins and fix trailing-slash mismatch for l…

  #128·mulldug opened May 7, 2026Collaborator·

  ·
  5