Tom Moor
9b8acf3efb
Remove unnecessary default parameter values from function signatures ( #12617 )
...
* Fix remaining no-useless-default-assignment lint warnings
* Promote no-useless-default-assignment lint rule to error
2026-06-07 15:46:01 -04:00
Tom Moor
957648a588
feat: OAuth dynamic client registration ( #11462 )
...
* feat: DCR first pass
* Add cleanup task, management endpoints
* Apply suggestions from code review
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
* wip
* Combine migrations
* Self review
* fix: Guard OAuth policies
* fix: Application access list not updating on deletion
* feat: Add OAUTH_DISABLE_DCR env var to disable dynamic client registration
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com >
* fix: Validate max length of redirect URIs in DCR schemas
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com >
* Self review
* Use withCtx methods for correct event creation
* Remove incorrect scopes_supported
---------
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com >
2026-02-16 17:30:19 -05:00
Tom Moor
bf45e97641
chore: Enforce type import consistency ( #10968 )
...
* Update types
* fix circular dep
* type imports
* lint type imports and --fix
2025-12-19 23:07:02 -05:00
Tom Moor
5c37f0a91d
fix: Details returned from OAuth client list endpoint ( #10896 )
2025-12-13 12:41:43 -05:00
Tom Moor
94252672f8
feat: Allow PKCE clients to refresh tokens ( #10769 )
...
* Add clientType concept
* Add clientType mutations
* tsc
* i18n
* fix: Invalid input handling
* tsc
2025-12-03 18:09:43 -05:00
Tom Moor
a06671e8ce
OAuth provider ( #8884 )
...
This PR contains the necessary work to make Outline an OAuth provider including:
- OAuth app registration
- OAuth app management
- Private / public apps (Public in cloud only)
- Full OAuth 2.0 spec compatible authentication flow
- Granular scopes
- User token management screen in settings
- Associated API endpoints for programatic access
2025-05-03 19:40:18 -04:00