audiobookshelf/server/auth
Denis Arnst 49aeb2da19
Require email_verified to be explicitly true when enforcement is enabled
Previously the check only rejected email_verified === false, allowing
logins when the claim was missing entirely. Since the admin opted in,
the IdP is expected to provide the claim.
2026-02-05 19:56:58 +01:00
..
AuthError.js Revamp OIDC auth: remove Passport wrapper, add schema-driven settings UI 2026-02-05 17:54:59 +01:00
BackchannelLogoutHandler.js Add OIDC Back-Channel Logout support 2026-02-05 17:55:10 +01:00
LocalAuthStrategy.js Seperate out auth strategies, update change password to return error status codes 2025-07-07 15:04:40 -05:00
OidcAuthStrategy.js Require email_verified to be explicitly true when enforcement is enabled 2026-02-05 19:56:58 +01:00
OidcSettingsSchema.js Add OIDC Back-Channel Logout support 2026-02-05 17:55:10 +01:00
TokenManager.js Add OIDC Back-Channel Logout support 2026-02-05 17:55:10 +01:00