Skip to content

feat(oauth): OAuth identity sign-in with cross-origin token exchange #1141

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
theothersideofgod wants to merge 16 commits into
base: main
Choose a base branch
from
Open

feat(oauth): OAuth identity sign-in with cross-origin token exchange #1141

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
16 commits
Select commit Hold shift + click to select a range
5b45d40
feat(oauth): add email verification tracking
theothersideofgod May 12, 2026
52b8330
feat(server): add OAuth callback wiring to sign_in_identity
theothersideofgod May 11, 2026
e8b7cd8
test(oauth): add middleware and multi-tenant tests
theothersideofgod May 12, 2026
0324329
feat(oauth): read provider config from database
theothersideofgod May 12, 2026
ab838e6
feat(oauth): derive baseUrl from request for multi-tenant support
theothersideofgod May 11, 2026
b800f26
fix(oauth): resolve route conflicts and parameter order
theothersideofgod May 12, 2026
cc47dfb
feat(oauth): cookie and token modes with JWT context
theothersideofgod May 12, 2026
034e27c
fix(oauth): require OAUTH_SECRET in all environments
theothersideofgod May 12, 2026
27798db
fix(oauth): use correct env var name in tests
theothersideofgod May 13, 2026
8f74950
refactor(oauth): remove unused callSignInIdentity and callSignUpIdentity
theothersideofgod May 13, 2026
59a9ba7
fix(oauth): remove internal error message from redirect URL
theothersideofgod May 13, 2026
7d15b21
refactor(oauth): add typed OAuthRoutesConfig to ConstructiveOptions
theothersideofgod May 13, 2026
3215417
feat(oauth): add rate limiting to OAuth endpoints
theothersideofgod May 14, 2026
5eeeb25
fix(oauth): synchronize cookie and session duration with remember_me=…
theothersideofgod May 14, 2026
5d06839
fix(oauth): use client_secret_id instead of provider id for encrypted…
theothersideofgod May 14, 2026
60d33de
fix(oauth): correct parameter order for sign_in_identity and sign_up_…
theothersideofgod May 14, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 2 additions & 0 deletions graphql/server/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -44,6 +44,7 @@
"@constructive-io/csrf": "workspace:^",
"@constructive-io/graphql-env": "workspace:^",
"@constructive-io/graphql-types": "workspace:^",
"@constructive-io/oauth": "workspace:^",
"@constructive-io/s3-utils": "workspace:^",
"@constructive-io/upload-names": "workspace:^",
"@constructive-io/url-domains": "workspace:^",
Expand All @@ -56,6 +57,7 @@
"cors": "^2.8.6",
"deepmerge": "^4.3.1",
"express": "^5.2.1",
"express-rate-limit": "^8.5.1",
"gql-ast": "workspace:^",
"grafast": "1.0.0",
"grafserv": "1.0.0",
Expand Down
Loading
Loading