4bfb8b36c2
chore!: migrate album owner to album_user ( #27467 )
...
Co-authored-by: mertalev <101130780+mertalev@users.noreply.github.com >
Co-authored-by: shenlong-tanwen <139912620+shalong-tanwen@users.noreply.github.com >
2026-04-22 16:52:23 +02:00
55f2b3b6a0
feat(server): add configurable OAuth prompt parameter ( #26755 )
...
* feat(server): add configurable OAuth prompt parameter
Add a `prompt` field to the OAuth system config, allowing admins to
configure the OIDC `prompt` parameter (e.g. `select_account`, `login`,
`consent`). Defaults to empty string (no prompt sent), preserving
backward compatibility.
This is useful for providers like Google where users want to be prompted
to select an account when multiple accounts are signed in.
Discussed in #20762
* chore: regenerate OpenAPI spec and clients for OAuth prompt field
* Adding e2e test cases
* feat: web setting
* feat: docs
---------
Co-authored-by: Jason Rasmussen <jason@rasm.me >
2026-04-17 21:20:07 +00:00
dbf30b77bf
feat(server): added backchannel logout api endpoint ( #26235 )
...
* feat(server): added backchannel logout api endpoint
* test(server): fixed e2e tests
* fix(server): fixed suggested changes by reviewer
* feat(server): created function invalidateOAuth
* fix(server): fixed session.repository.sql
* test(server): added unit tests for backchannelLogout function
* test(server): added e2e tests for oidc backchnnel logout
* docs(server): added documentation on backchannel logout url
* docs(server): fixed typo
* feat(server): minor improvements of the oidc backchannel logout
* test(server): fixed tests after merge with main
* fix(server): fixed e2e test file
* refactor(server): tiny refactor of validateLogoutToken
* chore: cleanup
* fix: tests
* fix: make jwks extractable
---------
Co-authored-by: Daniel Dietzler <mail@ddietzler.dev >
2026-04-17 18:45:33 +00:00
2f8be45fe0
chore!: remove /api/server/theme endpoint ( #27880 )
...
chore: remove server/theme endpoint
2026-04-17 08:30:03 -04:00
d046f16860
fix(oauth): normalize email claim to lowercase and trim before account lookup and registration ( #26841 )
...
* fix(oauth): normalize email claim to lowercase before account lookup and registration
* test(auth): add test for OAuth email case normalization
* chore: clean up
---------
Co-authored-by: Jason Rasmussen <jason@rasm.me >
2026-04-16 15:41:42 +00:00
88815a0345
chore(deps): update base-image to v202604141125 (major) ( #27858 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-04-16 15:40:40 +00:00
3356e81c85
fix!: do not allow insecure oauth requests by default ( #27844 )
...
* fix!: do not allow insecure oauth requests by default
* fix: format
* fix: make open-api
* fix: tests
* nit: casing
* chore: migration to allow insecure if current oauth uses http
2026-04-16 10:11:58 -04:00
a69eecf3bc
chore!: remove without assets ( #27835 )
...
* chore!: remove without assets
* fix: linting and e2e
---------
Co-authored-by: Daniel Dietzler <mail@ddietzler.dev >
2026-04-15 18:34:22 -04:00
8ee5d3039a
chore!: remove deviceId and deviceAssetId ( #27818 )
...
chore: remove deviceId and deviceAssetId
2026-04-15 15:00:33 -04:00
6da2d3d587
chore!: remove getRandom api endpoint ( #27780 )
...
* chore!: remove getRandom api endpoint
* chore: sync openapi
* fix: test
* chore: more cleanup
2026-04-14 21:32:12 -04:00
6ba17bb86f
refactor!: remove my shared link dto ( #27023 )
...
refactor!: remove deprecated shared link apis
2026-04-14 20:58:02 -04:00
7d8f843be6
refactor!: migrate class-validator to zod ( #26597 )
2026-04-14 23:39:03 +02:00
94b15b8678
fix(server): album permissions for editors ( #27214 )
...
* fix(server): album permissions for editors
* test: adjust e2e test
* test: fix test
2026-03-23 21:39:30 -05:00
55513cd59f
feat(server): support IDPs that only send the userinfo in the ID token ( #26717 )
...
Co-authored-by: irouply <irouply@secom.fr >
Co-authored-by: Daniel Dietzler <mail@ddietzler.dev >
2026-03-13 22:14:45 +01:00
3fd24e2083
fix(server): restrict individual shared link asset removal to owners ( #26868 )
...
* fix(server): restrict individual shared link asset removal to owners
* make open-api
2026-03-12 14:48:00 -04:00
b4e16efdf4
test: face ordering issue/flakiness ( #26382 )
2026-02-20 09:23:40 -05:00
b2050583f5
chore: run maintenance test (e2e) in isolation too, share containers ( #26246 )
2026-02-18 09:39:13 -05:00
72cef8b94b
feat: shared link login ( #25678 )
2026-02-12 12:08:38 -05:00
6af534fe4c
feat: run maintenance tests in isolation, share containers between all … ( #25856 )
...
* feat: run maintance tests in isolation, share containers between all serial test suites
* refactor: organize files
---------
Co-authored-by: Jason Rasmussen <jason@rasm.me >
2026-02-10 11:05:06 -05:00
Daniel Dietzler
sparsh985
santanoce
Jason Rasmussen
Timothy Dobras
renovate[bot]
bo0tzz
Brandon Wees
Timon
Yaros
Belnadifia
Michel Heusschen
Min Idzelis