Maurice a074debd61 fix(auth): keep the last admin when OIDC claims would demote it (#1274) ...

On OIDC-only instances the bootstrap admin (first SSO user) rarely carries the configured admin claim, so a forced re-login — e.g. after a JWT-secret rotation — re-derived its role purely from claims and demoted it to user, locking the instance out with no recovery. The OIDC login role sync now skips a downgrade that would strip the last remaining admin, and the admin user-update endpoint guards the same case.

2026-06-21 00:28:39 +02:00

..

db

v3.1.1 bug fixes (#1228)

2026-06-18 20:13:30 +02:00

demo

v2.6.2 — TREK Rebrand, OSM Enrichment, File Management, Hotel Bookings & Bug Fixes

2026-03-28 16:38:08 +01:00

mcp

fix(days): align note time limit to 250 and keep toasts above modal blur (#1252)

2026-06-19 17:56:41 +02:00

middleware

fix(security): allow same-origin PDF previews under CSP (#1253)

2026-06-19 17:56:26 +02:00

nest

fix(days): align note time limit to 250 and keep toasts above modal blur (#1252)

2026-06-19 17:56:41 +02:00

services

fix(auth): keep the last admin when OIDC claims would demote it (#1274)

2026-06-21 00:28:39 +02:00

systemNotices

Bug fixes - May 2nd 2026 (#941)

2026-05-03 17:39:45 +02:00

typings

Release 3.1.0 (#1185)

2026-06-16 22:22:45 +02:00

utils

Release 3.1.0 (#1185)

2026-06-16 22:22:45 +02:00

addons.ts

Release 3.1.0 (#1185)

2026-06-16 22:22:45 +02:00

bootstrap.ts

Release 3.1.0 (#1185)

2026-06-16 22:22:45 +02:00

config.ts

v3.1.1 bug fixes (#1228)

2026-06-18 20:13:30 +02:00

index.ts

Release 3.1.0 (#1185)

2026-06-16 22:22:45 +02:00

scheduler.ts

Release 3.1.0 (#1185)

2026-06-16 22:22:45 +02:00

types.ts

Release 3.1.0 (#1185)

2026-06-16 22:22:45 +02:00

websocket.ts

Release 3.1.0 (#1185)

2026-06-16 22:22:45 +02:00