Tink bot c6bda7a2dd feat(oauth2server): accept loopback redirect URIs ... Previously the OAuth server rejected every redirect_uri that did not start with a vikunja- custom scheme. Native apps that cannot register a custom scheme (e.g. CLIs, desktop tools) need loopback redirects per RFC 8252, so also allow http://localhost, http://127.0.0.1 and http://[::1] (any port). Non-loopback http:// and https:// targets remain rejected. https://claude.ai/code/session_01LsTDrCJ7trE6WQ4FYf78UB		2026-05-07 22:03:49 +00:00
..
auth	feat(oauth2server): accept loopback redirect URIs	2026-05-07 22:03:49 +00:00
avatar	feat(avatar): use distinct marble palette for bot users	2026-05-01 14:44:10 +00:00
background	fix: add timeouts to Gravatar, Unsplash, and SSRF-safe HTTP clients	2026-04-09 07:31:08 +00:00
dump	chore(lint): suppress known gosec false positives	2026-03-23 16:23:15 +01:00
keyvalue	fix: fatal with clear message when keyvalue type is redis but redis is not enabled	2026-04-12 09:43:31 +00:00
migration	feat(migration/wekan): import attachments from board export	2026-04-13 16:04:14 +00:00