Bryan Frimin febf4a930e Treat OIDC and magic link sessions as password-equivalent when assuming an org ...

Users authenticated via Google/Microsoft OIDC or magic link previously
relied on a fall-through in the password-only org check. Make the rule
explicit so SSO-only users can access password-only organizations
without being bounced to the password login form they cannot satisfy.

Signed-off-by: Bryan Frimin <bryan@getprobo.com>

2026-04-30 17:24:04 +04:00

..

oauth2server

Drop IntrospectToken doc comment

2026-04-29 17:59:11 +04:00

oidc

Upgrade to kit v0.3.0

2026-04-03 11:56:06 +02:00

policy

Update copyright headers across all Go files

2026-03-25 17:38:32 +01:00

saml

Upgrade to kit v0.3.0

2026-04-03 11:56:06 +02:00

scim

Handle SCIM user email rename via external ID fallback

2026-04-23 10:45:48 +02:00

account_service.go

Invalidate sessions on password change and reset

2026-04-29 17:57:19 +04:00

api_key.go

Upgrade to kit v0.3.0

2026-04-03 11:56:06 +02:00

auth_service.go

Invalidate sessions on password change and reset

2026-04-29 17:57:19 +04:00

authorizer.go

Add OAuth2/OpenID Connect authorization server

2026-04-19 12:00:53 +02:00

compliance_page_service.go

Upgrade to kit v0.3.0

2026-04-03 11:56:06 +02:00

errors.go

Distinguish expired magic links from invalid tokens

2026-03-27 09:15:41 +01:00

iam_actions.go

Add OAuth2/OpenID Connect authorization server

2026-04-19 12:00:53 +02:00

iam_policies.go

Add OAuth2/OpenID Connect authorization server

2026-04-19 12:00:53 +02:00

organization_service.go

Only guard owner demotion for active profiles

2026-04-21 11:28:43 +02:00

policy_set_test.go

Update copyright headers across all Go files

2026-03-25 17:38:32 +01:00

policy_set.go

Add OAuth2/OpenID Connect authorization server

2026-04-19 12:00:53 +02:00

saml_domain_verifier.go

Upgrade to kit v0.3.0

2026-04-03 11:56:06 +02:00

service.go

Add OAuth2/OpenID Connect authorization server

2026-04-19 12:00:53 +02:00

session_service.go

Treat OIDC and magic link sessions as password-equivalent when assuming an org

2026-04-30 17:24:04 +04:00

validators.go

Update copyright headers across all Go files

2026-03-25 17:38:32 +01:00