feat(oauth): OAuth identity sign-in with cross-origin token exchange#1141

Open

theothersideofgod wants to merge 16 commits into

mainfrom

feat/sso-oauth-callback-750

Commits on May 15, 2026

feat(oauth): add email verification tracking
theothersideofgod
committed
feat(server): add OAuth callback wiring to sign_in_identity

theothersideofgod
and
claude
committed
test(oauth): add middleware and multi-tenant tests
theothersideofgod
committed
feat(oauth): read provider config from database
theothersideofgod
committed
feat(oauth): derive baseUrl from request for multi-tenant support

theothersideofgod
and
claude
committed
fix(oauth): resolve route conflicts and parameter order
theothersideofgod
committed
feat(oauth): cookie and token modes with JWT context
theothersideofgod
committed
fix(oauth): require OAUTH_SECRET in all environments

theothersideofgod
and
claude
committed
fix(oauth): use correct env var name in tests

theothersideofgod
and
claude
committed
refactor(oauth): remove unused callSignInIdentity and callSignUpIdentity

theothersideofgod
and
claude
committed
fix(oauth): remove internal error message from redirect URL

theothersideofgod
and
claude
committed
refactor(oauth): add typed OAuthRoutesConfig to ConstructiveOptions

theothersideofgod
and
claude
committed
feat(oauth): add rate limiting to OAuth endpoints

theothersideofgod
and
claude
committed
fix(oauth): synchronize cookie and session duration with remember_me=true

theothersideofgod
and
claude
committed
fix(oauth): use client_secret_id instead of provider id for encrypted secret lookup

theothersideofgod
and
claude
committed
fix(oauth): correct parameter order for sign_in_identity and sign_up_identity

theothersideofgod
and
claude
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

feat(oauth): OAuth identity sign-in with cross-origin token exchange#1141

feat(oauth): OAuth identity sign-in with cross-origin token exchange#1141
theothersideofgod wants to merge 16 commits into
mainfrom
feat/sso-oauth-callback-750

Commits on May 15, 2026

feat(oauth): add email verification tracking

feat(server): add OAuth callback wiring to sign_in_identity

test(oauth): add middleware and multi-tenant tests

feat(oauth): read provider config from database

feat(oauth): derive baseUrl from request for multi-tenant support

fix(oauth): resolve route conflicts and parameter order

feat(oauth): cookie and token modes with JWT context

fix(oauth): require OAUTH_SECRET in all environments

fix(oauth): use correct env var name in tests

refactor(oauth): remove unused callSignInIdentity and callSignUpIdentity

fix(oauth): remove internal error message from redirect URL

refactor(oauth): add typed OAuthRoutesConfig to ConstructiveOptions

feat(oauth): add rate limiting to OAuth endpoints

fix(oauth): synchronize cookie and session duration with remember_me=true

fix(oauth): use client_secret_id instead of provider id for encrypted secret lookup

fix(oauth): correct parameter order for sign_in_identity and sign_up_identity