Repository navigation

feat: support OAuth2 profile sign-in and account linking - #21

Merged

linkdata merged 43 commits into

mainfrom

codex/feat/oauth2-provider-linking

Nov 5, 2026

Merged

feat: support OAuth2 profile sign-in and account linking#21
linkdata merged 43 commits into
mainfrom
codex/feat/oauth2-provider-linking

Commits on Nov 4, 2026
- feat(auth): isolate provider session keys
  linkdata
  committed
  c39e4c3
- feat(auth): support OAuth profile linking and bounded flows
  linkdata
  committed
  db7080c
- fix(auth): bound provider callbacks and session retention
  linkdata
  committed
  1f26ab6
- test(auth): isolate overlapping provider flows
  linkdata
  committed
  ea903d1
- fix: cancel stale OAuth callbacks on logout
  linkdata
  committed
  4726e13
- fix: reject invalid OAuth identities at callback completion
  linkdata
  committed
  ee25930
- fix: handle short profile tokens and offline consent
  linkdata
  committed
  c3ee58e
- fix(oauth): honor UserInfo deadlines and token expiry
  linkdata
  committed
  17cad04
- fix: preserve OAuth flows across auth expiry
  linkdata
  committed
  2db75e6
- fix: reject OAuth token endpoint redirects
  linkdata
  committed
  1dfddcf
- ci: update Staticcheck for Go 1.27
  linkdata
  committed
  51fc0b4
- ci: update golangci-lint for Go 1.27
  linkdata
  committed
  dee95e7
- ci: update gosec for Go 1.27
  linkdata
  committed
  da37551
- feat: serialize OAuth session rotation with link writes
  linkdata
  committed
  6d11b14
- fix: preserve OAuth flows across concurrent auth changes
  linkdata
  committed
  dd15208
- fix: bound pending login grace and stale auth timers
  linkdata
  committed
  a105ae7
- docs: describe bounded auth timer cleanup
  linkdata
  committed
  cc839ed
- fix: bound OAuth refresh and login redirects
  linkdata
  committed
  784685d
- test: bound OAuth callback synchronization waits
  linkdata
  committed
  5e48aea
- fix: enforce HTTPS for discovered OIDC endpoints
  linkdata
  committed
  be6d723
- fix: serialize auth revocation and bound OIDC verification
  linkdata
  committed
  86fc195
- test: assert locked revocation callback
  linkdata
  committed
  9111a3e
- fix: serialize built-in logout with account links
  linkdata
  committed
  aaa6714
- fix(auth): preserve pending login and simplify provider flows
  linkdata
  committed
  d8024f6
- fix: serialize link callbacks with auth revocation
  linkdata
  committed
  7e1831b
- fix: simplify OAuth flows and guard refresh identity
  linkdata
  committed
  679a075
- fix: simplify OAuth callbacks and clarify provider docs
  linkdata
  committed
  7885841
- fix: guard linked identity expiry and simplify OAuth callbacks
  linkdata
  committed
  6eb62b4
Commits on Nov 5, 2026
- fix: reuse pending OAuth login and clarify auth contracts
  linkdata
  committed
  f677332
- fix: serialize OAuth starts and require verified profile admins
  linkdata
  committed
  46dda49
- fix: order auth events and simplify OAuth flow
  linkdata
  committed
  914c3af
- fix: preserve callback paths and defer logout safely
  linkdata
  committed
  351cefd
- fix(auth): tighten return targets and provider timeouts
  linkdata
  committed
  254569a
- fix(auth): renew nearly expired login flows
  linkdata
  committed
  36b1a65
- fix(auth): share default rotation lock across providers
  linkdata
  committed
  e5256aa
- fix(auth): bind session claims to provider issuer
  linkdata
  committed
  c763eb4
- fix(auth): refresh early and simplify callback handling
  linkdata
  committed
  6e5c988
- fix(auth): stop old timer during login rotation
  linkdata
  committed
  476fc8d
- refactor: simplify auth timer and clarify provider guidance
  linkdata
  committed
  df67b3d
- test: cover stale auth timer and clarify session guidance
  linkdata
  committed
  05fb2cc
- test: cover linking revocation and callback limits
  linkdata
  committed
  e542213
- fix: bind OAuth flows to originating server
  linkdata
  committed
  fc41b68
- fix: prevent cross-provider OAuth redirect reuse
  linkdata
  committed
  b65e0ba

Commits

Commits on Nov 4, 2026

Commits on Nov 5, 2026