All pull requests

Pull requests

• fix(oidc): validate redirect uri before linking session to auth request

  os-contribution
  #12991·Tyagiquamar opened Oct 25, 2026·

  ·
  1

  1

• fix(query): assign the smtp password column once when a config change carries both password fields

  os-contribution
  #12990·nickjn92 opened Oct 24, 2026·

  ·
  3

  1

• fix(execution): report a failed target as unavailable

  os-contribution
  #12977·vlkornev opened Oct 21, 2026·

  ·
  1

  1

• fix(oidc): return invalid_grant for an invalid code or refresh token

  os-contribution
  #12975·vlkornev opened Oct 21, 2026·

  ·
  1

  1

• fix(oidc): enforce max_age when linking V2 sessions

  os-contribution
  #12971·Sam123ben opened Oct 21, 2026·

  ·
  1

  1

• WIP: establish fail-closed SCIM IdP routing policy (#10535)

  os-contribution
  #12970·upramod opened Oct 21, 2026·

  ·
  1

• fix(login): offer a way back to the login after the session expired

  os-contribution
  #12967·shadoath opened Oct 20, 2026·

  ·
  1

• fix(login): hide the language switcher when only one language is allowed

  os-contribution
  #12966·shadoath opened Oct 20, 2026·

  ·
  1

• fix(login): give the copy-to-clipboard button an accessible name

  os-contribution
  #12965·shadoath opened Oct 20, 2026·

  ·
  1

• fix(login): show the TOTP secret with its own copy button

  os-contribution
  #12964·shadoath opened Oct 20, 2026·

  ·
  1

• fix(api): accept org.create for creating organizations via v2

  os-contribution
  #12960·blacksoxx opened Oct 20, 2026·

  ·
  1

  2

• fix: reject email addresses with single-label domains

  os-contribution
  #12954·Sun-Wukhan opened Oct 18, 2026·

  ·
  1

  2

• fix(webauthn): request a discoverable credential for passkey registration

  os-contribution
  #12953·choksi2212 opened Oct 18, 2026·

  ·
  1

  4

• fix(session): unmarshal the terminated event so back-channel logout uses the terminating origin

  os-contribution
  #12952·choksi2212 opened Oct 18, 2026·

  ·
  1

  4

• fix(login): associate validation errors with text inputs

  os-contribution
  #12951·ChrisAdels opened Oct 17, 2026·

  ·
  2

• fix(login): save registration language in new user profiles

  os-contribution
  #12950·ChrisAdels opened Oct 17, 2026·

  ·
  2

• fix(actions): keep interruptOnError from the target added event in the write model

  os-contribution
  #12940·jia-pylon opened Oct 16, 2026·

  ·
  1

  2

• fix(login): offer a choice of available sign-in methods

  os-contribution
  #12938·Michael-Zebratrix opened Oct 15, 2026·

  ·
  1

• fix(login): allow authenticated users to link external identities

  os-contribution
  #12937·Michael-Zebratrix opened Oct 15, 2026·

  ·
  1

• fix(console): keep a provider's stored options on a collapsed IdP save #12906

  os-contribution
  #12934·choksi2212 opened Oct 15, 2026·

  ·
  1

  3

• fix(query): join only the primary login name in session queries

  os-contribution
  #12918·choksi2212 opened Oct 11, 2026·

  ·
  1

  4

• fix(queue): skip job inserts when no queue is configured

  os-contribution
  #12916·choksi2212 opened Oct 11, 2026·

  ·
  1

  7

• fix(eventstore): dual-write projection cursors for rolling upgrades

  #12913·adlerhurst opened Oct 9, 2026Member·

  ·
  7

  

• feat(login): add recovery codes as second factor

  os-contribution
  #12910·antondrozd opened Oct 8, 2026·

  ·
  1

  2

• docs: fix Pylon API example routes and endpoint list

  os-contribution
  #12908·CorneiZeR opened Oct 8, 2026·

  ·
  3