All notable changes to this project will be documented in this file.
The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.
- Added a configuration option
client_secret_file_pathto pass the client secret by file path instead of environment variable. - Added silent SSO, where users already authenticated with the OIDC provider are logged in automatically.
- Added a
/logged_outpage to inform users they have been signed out, with a link to sign back in. - Added a
Content-Security-Policyheader to app routes. - Added a
X-Frame-Optionsheader to all routes. - Added a
Referrer-Policyheader to all routes.
2.0.0 - 2025-02-08
- Added
bindPathandsocketUseroptions to the NixOS module. - Added support for Kanidm
- Added a
additional_scopesoption to the NixOS module. - Added a
roles_pathoption to the NixOS module.
- Added a
- Removed the
bind_addrsconfiguration option.
1.1.0 - 2024-07-20
- Added pretty page titles. Pages now display the HTML title instead of directory path.
- Added a
robots.txtendpoint to the server. - Added additional systemd hardening.
- Fixed missing favicon and CSS in NixOS release.
- Fixed missing audience mapper instructions in keycloak setup documentation.
- Fixed user receiving authentication errors if they have no roles.
1.0.0 - 2024-07-07
Initial release.