jubnl 32b63adc68 fix: add OIDC_SCOPE env var and document it across all config files ... Fixes #306 — OIDC scopes were hardcoded to 'openid email profile', causing OIDC_ADMIN_CLAIM-based role mapping to fail when the required scope (e.g. 'groups') wasn't requested. The new OIDC_SCOPE variable defaults to 'openid email profile groups' so group-based admin mapping works out of the box. Variable is now documented in README, docker-compose, .env.example, and the Helm chart values.		2026-04-02 07:46:58 +02:00
..
db	feat: support ADMIN_EMAIL and ADMIN_PASSWORD env vars for initial admin setup	2026-04-01 23:09:57 +02:00
demo	v2.6.2 — TREK Rebrand, OSM Enrichment, File Management, Hotel Bookings & Bug Fixes	2026-03-28 16:38:08 +01:00
mcp	Merge pull request #179 from shanelord01/audit/remediation-clean	2026-03-31 20:53:48 +02:00
middleware	fix: resolve Immich 401 passthrough causing spurious login redirects	2026-04-01 21:19:53 +02:00
routes	fix: add OIDC_SCOPE env var and document it across all config files	2026-04-02 07:46:58 +02:00
services	docs: document COOKIE_SECURE and OIDC_DISCOVERY_URL across all config files	2026-04-01 21:44:02 +02:00
utils	fix: add SSRF protection for link preview and Immich URL	2026-04-01 07:59:03 +02:00
config.ts	fix: persist encryption key to disk regardless of resolution source	2026-04-01 10:03:46 +02:00
index.ts	fix: remove redundant db import alias in index.ts	2026-04-01 20:38:25 +02:00
scheduler.ts	feat: configurable trip reminders, admin full access, and enhanced audit logging	2026-03-31 22:23:38 +03:00
types.ts	feat: notifications, audit logging, and admin improvements	2026-03-31 22:23:23 +03:00
websocket.ts	fix: replace JWT tokens in URL query params with short-lived ephemeral tokens	2026-04-01 07:57:14 +02:00