- b45300f Mark confidential clients as slightly more secure by Akron · 2 years, 8 months ago
- a8efaa9 OAuth client authorization handling (Fixes #54) by Akron · 2 years, 9 months ago
- b6b156e Support confidential clients by Akron · 2 years, 9 months ago
- 6227fba Introduce korapxml2krill command by Akron · 3 years, 3 months ago
- 653461e Introduce tei2korapxml command by Akron · 3 years, 3 months ago
- c23ce66 Format page numbers in pagination by Akron · 3 years ago
- 3d68ac3 Prevent Autosecret migration if old secret is > 22 chars (fixes #157) by Akron · 3 years ago
- 5799740 Use containerMenu as a base for HintMenu instead of regular menu by Leo Repp · 3 years, 4 months ago
- 6a228db Fix wrong handling of utf8 that could lead to server crashes by Akron · 3 years, 3 months ago
- a4b17f7 Support inactive buttongroup items by Akron · 3 years, 2 months ago
- 638fc97 Disable CSP for development purposes by Akron · 3 years, 3 months ago
- 1419aad Add demo server plugin by Akron · 3 years, 3 months ago
- a7258cb Fold all top-level navigation items in doc by Akron · 3 years, 4 months ago
- dd5ab89 Tutorial: Introduce legacy links by Akron · 3 years, 4 months ago
- 64833cc Fix behaviour of folded subdirectories in navigation by Akron · 3 years, 4 months ago
- fcadda6 Tutorial: rename korap to devlopment also internally by Marc Kupietz · 3 years, 4 months ago
- da903dd Tutorial: move dev/team section to the bottom by hebasta · 3 years, 5 months ago
- aef5cf2 Remove X-Frame-Options in favor of CSP frame-ancestors by Akron · 3 years, 6 months ago
- cce055c Fix error message in case of server error by Akron · 3 years, 6 months ago
- 5f75641 Added 'copy-to-clipboard' for client ids by Akron · 3 years, 6 months ago
- 116eace Add option to toggle password fields by Akron · 3 years, 7 months ago
- ff08811 Fix rendering error in not authenticated oauth route by Akron · 3 years, 7 months ago
- 276afc0 Update client list API according to API change by Akron · 3 years, 7 months ago
- 013c39f Fix integration of form buttons in button groups by Akron · 3 years, 7 months ago
- e997bb5 Improve localization of OAuth2 client and token management by Akron · 3 years, 7 months ago
- 7fb78d6 Deprecate JWT flow in favor of OAuth2 flow by Akron · 3 years, 7 months ago
- ad011bb Disable caching in auth routes by Akron · 3 years, 7 months ago
- 041ca4d Reorganize OAuth endpoints by Akron · 3 years, 7 months ago
- c1aaf93 Allow to revoke tokens by Akron · 3 years, 7 months ago
- 9ffb4a3 Style token list by Akron · 3 years, 7 months ago
- aa5cf80 Fix bug where missing documentation raises exceptions in Mojo >= 9.0 by Akron · 3 years, 7 months ago
- 2c2ddbd Introduce autorotating secrets for security by Akron · 3 years, 10 months ago
- abdf9a9 Added query reference plugin to connect and mock query reference api endpoints by Akron · 4 years ago
- bc94a9c List tokens of a client by Akron · 3 years, 9 months ago
- dc50c89 Update OAuth2 management parameters to follow the new scheme of Kustvakt by Akron · 3 years, 8 months ago
- 26244a7 Change samesite cookie value to 'none' to allow for session riding by Akron · 3 years, 8 months ago
- 83209f7 Issue a new token for a public client by Akron · 4 years ago
- 0e983a0 Add frame-src to Piwik plugin as * may be overwritten by Akron · 3 years, 10 months ago
- 1011daf Make mailto: embedding CSP compliant by Akron · 3 years, 10 months ago
- baae980 Fix working directory for default plugin configurations by Akron · 3 years, 10 months ago
- 08952df Move tracking asset to simplify proxy configuration by Akron · 3 years, 10 months ago
- 30e7bc7 Introduce Kalamar::Request by Akron · 3 years, 11 months ago
- be60634 Remove debrecated API methods by Akron · 3 years, 11 months ago
- 03c3c9d Support Mojolicious >= 9.0 by Akron · 3 years, 11 months ago
- 87468c2 Define resources in Makefile by Akron · 3 years, 11 months ago
- 1871f03 Support CSP in overview image by Akron · 4 years ago
- 0a4d36e Support CSP in Matomo/Piwik plugin by Akron · 4 years ago
- 8dda1c6 Add CSP compliance to plugins by Akron · 4 years ago
- cb5c171 Make notifications framework CSP compliant by Akron · 4 years ago
- 52b32d0 Introduce X-XSS-Protection header by Akron · 4 years ago
- 88fc41c Introduce X-Frame-Origin header by Akron · 4 years ago
- 5b6d727 Improve CORS by Akron · 4 years ago
- 807225b Send 'nosniff' header (fixes #97) by Akron · 4 years ago
- 1bee5a4 Introduce HSTS header for https_only conf by Akron · 4 years ago
- b7b91c5 Remove no-js declaration in nonce-enabled inline script by Akron · 4 years ago
- dac9561 Fixed nonce to be base64 by Akron · 4 years ago
- c4ea2e5 Adopt CSP plugin for main headers by Akron · 4 years ago
- eb53ac3 Added nonce helper to CSP plugin by Akron · 4 years ago
- 354f453 Establish CSP plugin by Akron · 4 years ago
- 8f8deda Remove default endpoint from config file by Akron · 4 years ago
- bc6b3f2 Introduce CSP headers to Kalamar (start of #72) by Akron · 4 years ago
- 337f15d Introduce CORS headers in proxy by Akron · 4 years ago
- 8f9aae5 Update for recent version of Mojolicious by Akron · 4 years ago
- e208d30 Remove email support from login (fixes #99) by Akron · 4 years, 1 month ago
- 58f7c81 Bump version by Akron · 4 years, 3 months ago
- c58bfc4 Fix pipes behaviour in mock server to be consistent with Kustvakt by Akron · 4 years, 3 months ago
- fd49bab Forward 'pipes' instead of 'pipe' by Akron · 4 years, 3 months ago
- ccd9d7d Introduce 'Plugins' plugin to embed external services by Akron · 4 years, 3 months ago
- 88c26b1 Exclude search results from robot indices (closes #120) by Akron · 4 years, 4 months ago
- 7b9a196 Forward pipe to backend by Akron · 4 years, 6 months ago
- e7ad84e Add information on secret file to readme by Akron · 4 years, 6 months ago
- 3b3c7af Fix order of promises in login to not wrongfully congratulate on failing login by Akron · 4 years, 8 months ago
- 27031aa Encourage login on zero matches (fixes #67) by Akron · 4 years, 8 months ago
- 7c87c1a Establish 'after_search' hook by Akron · 4 years, 8 months ago
- e8fdc81 Merge "Declare proxy as stable and enable by default" by Akron · 4 years, 8 months ago
- 8a21b4d Declare proxy as stable and enable by default by Akron · 4 years, 9 months ago
- 17de86e Add OAuth client information page by Akron · 4 years, 9 months ago
- 1a9d5be Added support for OAuth2 client unregistration by Akron · 4 years, 9 months ago
- 3c390c4 Improve status codes and support HTML match responses by Akron · 4 years, 9 months ago
- 0f1b93b Added support for OAuth2 client listing by Akron · 4 years, 10 months ago
- b3f3359 Spin off data templates into file templates for Auth plugin by Akron · 4 years, 10 months ago
- 5999212 Initial token management by Akron · 5 years ago
- d00b427 Improve proxy for redirects by Akron · 5 years ago
- 07d8de6 Document the API URI by Akron · 5 years ago
- 90be03b Support X-Forwarded-Host name for proxy by Akron · 5 years ago
- 5ea1a1a Introduced new version by Akron · 5 years ago
- 23ab047 Make proxy timeouts configurable by Akron · 5 years ago
- b5b70d0 Catch timeouts in proxy by Akron · 5 years ago
- 21b7baf Link to Leibniz Association updated by hebasta · 5 years ago
- 909ed08 Fixed matchID transformation to deal with textSigles having dashes by Akron · 5 years ago
- f7ec444 Added settings and navi helpers by Akron · 5 years ago
- d512ea6 Generalized the usage of the navigation helper by introducing a 'realm' parameter by Akron · 5 years ago
- 3cfa26d Added 'realm' parameter to 'embedded_link_to' helper by Akron · 5 years ago
- 254fe21 Simplified documentation routing by Akron · 5 years ago
- 9490e3b Generalize documentation helpers by Akron · 5 years ago
- 41a190a Cleanup helper plugins to separate page helpers from functional helpers by Akron · 5 years ago
- 6e74687 Dump version by Akron · 5 years ago
- 4cefe1f Revoke refresh token on logout (cherrypicked) by Akron · 5 years ago
- cdfd9d5 Implement token refresh mechanism by Akron · 5 years ago
- 91a7685 Fix treatment of legacy 'collection' parameter by Akron · 5 years ago