TREK/server/src at 2d9f545c57a72e4c62e5c425375a53b8cfb6cfc9 - TREK

k1nq/TREK

mirror of https://github.com/mauriceboe/TREK.git synced 2026-06-19 21:31:46 +00:00

Files

T

jubnl bfd2553d1e feat(auth): split OIDC_ONLY into granular auth toggles

Replaces the coarse oidc_only + allow_registration settings with four
independent toggles: password_login, password_registration, oidc_login,
oidc_registration. Each can be enabled/disabled individually in
Admin > Settings without affecting the others.

- Add resolveAuthToggles() in authService.ts as the central resolver;
  falls back to legacy oidc_only/allow_registration keys when new keys
  are absent (backward compat)
- OIDC_ONLY env var still works and overrides DB toggles for password_*,
  with a visual lock in the admin UI when active
- Server enforces lockout prevention: cannot disable all login methods
- oidc_login gate added to OIDC /login and /callback routes
- Remove oidc_only toggle from OIDC settings panel; replaced by the
  granular toggles in the Settings tab
- Add 6 new resolveAuthToggles() unit tests; fix AUTH-DB-033 error
  message assertion
- Update OIDC_ONLY descriptions in README, docker-compose, Helm values,
  Unraid template, and .env.example to clarify override semantics

Closes #492

2026-04-11 20:21:36 +02:00

feat(auth): split OIDC_ONLY into granular auth toggles

2026-04-11 20:21:36 +02:00

demo

v2.6.2 — TREK Rebrand, OSM Enrichment, File Management, Hotel Bookings & Bug Fixes

2026-03-28 16:38:08 +01:00

mcp

chore(mcp): raise default session and rate-limit caps

2026-04-11 02:29:11 +02:00

middleware

security(oauth): harden OAuth 2.1/MCP implementation (Critical + High + Medium findings)

2026-04-10 02:03:27 +02:00