70ff047588
fix(avatar): recover gracefully from broken avatar cache ( #1379 )
2025-09-02 14:03:58 +00:00
c7a26d81fe
fix(auth): do not panic with invalid openid provider configuration ( #1354 )
2025-08-31 07:17:50 +00:00
5ca637a7e6
feat(auth): add oauth require availability configuration on startup ( #1358 )
2025-08-30 22:15:20 +00:00
a81a3ee0e5
feat!: rename right to permission ( #1277 )
2025-08-13 11:05:05 +02:00
da0f6fb366
feat(auth): allow passing custom settings links to user account via openid claims
2025-08-03 13:25:32 +02:00
de917467cb
fix(openid): manually fetch providers
...
Partially reverts fcdcdcf46ahttps://github.com/go-vikunja/vikunja/issues/1165
2025-07-28 11:40:09 +02:00
bbd3567e43
chore: add debug logging around provider failure
...
https://github.com/go-vikunja/vikunja/issues/1165
2025-07-24 16:00:03 +02:00
7243a10fb2
fix(openid): check different provider types
...
Related to https://github.com/go-vikunja/vikunja/issues/1165
2025-07-23 15:40:51 +02:00
2b497e6265
fix: pass pointer when fetching provider
...
Resolves https://github.com/go-vikunja/vikunja/issues/1165
2025-07-23 11:09:09 +02:00
a31255707e
fix "null" in project views ( #1158 )
...
Co-authored-by: kolaente <k@knt.li>
2025-07-22 17:43:04 +00:00
ad0cf7a13c
fix: improve ldap sanitization ( #1155 )
2025-07-21 21:06:38 +00:00
ca83ad1f98
feat: move to slog for logging
2025-07-21 18:15:39 +02:00
a5591c1603
fix: correctly cache unsplash background
...
Resolves
https://vikunja.sentry.io/issues/6753151793/events/3d8773d79b9c4da0bf65140e4b7617b4/
2025-07-18 18:38:12 +02:00
c3fd659851
fix: correctly return cached intitals avatar
...
Resolves https://vikunja.sentry.io/issues/6752872121/events/92ff6a64c4b64aa3aecc6973611bd449/
2025-07-18 18:38:12 +02:00
566657c54a
fix: correctly return cached provider
2025-07-18 18:38:12 +02:00
45e7f6e316
fix: upload avatar caching
2025-07-18 18:38:12 +02:00
fcdcdcf46a
feat: use keyvalue.Remember where it makes sense
2025-07-17 16:19:13 +02:00
c7a98386c2
feat: add keyvalue.Remember function
2025-07-17 16:19:13 +02:00
ecc95e9139
fix: panic on restoring with numeric position fields ( #1089 )
...
Co-authored-by: kolaente <k@knt.li>
2025-07-15 15:44:21 +00:00
4da4bf69ca
fix(background): validate unsupported formats and show error message ( #1123 )
2025-07-15 13:21:48 +02:00
342bbd6192
fix: correct comments
2025-07-02 17:46:21 +02:00
59130766e8
fix(avatar): fallback to username when no name is set
2025-06-27 14:30:33 +02:00
99bc065272
feat(user): use name for initals avatar, not username
...
For external auth providers, the username might be randomly generated,
which results in a random initial - this is unexpected and confusing for
users.
2025-06-27 14:13:49 +02:00
4f8a2b0d38
chore(user): refactor invalidating upload avatar cache
2025-06-27 14:07:22 +02:00
0ecbd9e1a3
feat(user): add avatar cache flushing ( #1041 )
2025-06-27 14:01:43 +02:00
ae92822ee0
feat: add prefix key support to keyvalue store ( #1038 )
...
feat: add prefix key operations to keyvalue store
2025-06-27 11:05:37 +00:00
17b8d20e7b
fix(migration): reset buckets before creating related tasks so that they are actually created ( #1015 )
2025-06-25 14:03:44 +02:00
a214d68a44
feat(auth): sync avatar from OpenID providers ( #821 )
2025-06-16 15:59:31 +02:00
6671ce38a8
chore: rename API test suites ( #938 )
2025-06-13 08:23:17 +00:00
da95463bb2
fix(migration): detect header lines in csv file when importing from TickTick ( #937 )
2025-06-13 07:45:54 +00:00
296577a875
fix: correct license header references ( #882 )
...
See originals:
- https://www.gnu.org/licenses/agpl-3.0.txt
- https://www.gnu.org/licenses/gpl-3.0.txt
2025-06-10 12:18:38 +02:00
00c4148f05
feat(auth): add ForceUserInfo option to OpenID provider ( #797 )
...
Problem:
When using Casdoor as an OpenID provider, there's an inconsistency between the user information in the JWT token and the UserInfo endpoint. The token contains the user's unique ID in the `name` field, while the UserInfo endpoint correctly returns the user's display name.
Solution:
This PR adds a new `ForceUserInfo` option to the OpenID provider configuration. When enabled, it forces the use of the UserInfo endpoint to retrieve user information instead of relying on claims from the ID token.
Impact:
- Default behavior remains unchanged (backward compatible)
- New option allows administrators to force using UserInfo endpoint data
- Particularly useful for providers like Casdoor that don't fully comply with OIDC standards
Related:
I've opened an issue in the Casdoor repository (https://github.com/casdoor/casdoor/issues/3806 ) to discuss the root cause. However, changing Casdoor's token structure might cause significant compatibility issues for existing integrations, so it's unclear if this can be fixed at the provider level. This PR provides a workaround in Vikunja that doesn't affect existing functionality.
2025-05-20 08:06:34 +00:00
4a75f7d4da
chore(deps): update golangci/golangci-lint-action action to v7 ( #462 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: kolaente <k@knt.li>
2025-04-02 09:28:56 +02:00
7803fe8aef
fix(avatar): use keyvalue store to cache gravatar instead of map
...
Resolves https://community.vikunja.io/t/docker-crash-concurrent-map-writes-google-login/3454
2025-03-30 16:24:34 +02:00
6847f44058
chore(openid): add more debug logging when retrieving token
2025-03-29 19:24:07 +01:00
4ea3c01b5f
chore: add more debug logging when returning error
2025-03-29 18:21:34 +01:00
13d4e0e00d
chore(utils): remove deprecated MakeRandomString function
2025-03-24 16:52:46 +01:00
4d41a1bd9b
feat(kanban): create To-Do, Doing, Done buckets when creating a new kanban view
2025-03-21 19:16:52 +01:00
d522d40773
fix(migration): do not fail when an attachment is too large
...
Resolves https://vikunja.sentry.io/issues/6389417364/events/d79bdea146b54a9dace8c81e3f787975/
2025-03-21 18:03:27 +01:00
23d2814b94
fix(migration): check if the provided file is a valid csv before importing
2025-03-21 17:53:05 +01:00
d19a93dece
fix(migration): check if uploaded csv is empty
2025-03-21 17:48:08 +01:00
e3f006c527
fix(i18n): add missing translations
2025-03-20 17:41:45 +01:00
5a93379d81
fix(ldap): update user name and email during login
2025-03-20 17:24:00 +01:00
d585de77a4
fix(ldap): crop avatar when syncing
2025-03-20 17:19:58 +01:00
164f2eab9d
feat(ldap): also look for username only when checking group membership
2025-03-19 22:16:12 +01:00
f4b9a9cccd
feat(ldap): make member id attribute configurable
2025-03-19 22:15:50 +01:00
e12ebfebed
feat(ldap): sync avatar from ldap
2025-03-18 18:28:54 +01:00
26c7ceaed4
chore(avatar): decouple upload from web handler
2025-03-18 18:28:54 +01:00
732431773d
fix(i18n): remove duplicate api strings
2025-03-18 18:23:47 +01:00
99213c66ee
chore(openid): use general external team sync
2025-03-18 16:36:00 +00:00
Copilot
kolaente
Tobias
Dominik Pschenitschni
Weijie Zhao
renovate[bot]