Denis Arnst 073eff74ef Add OIDC Back-Channel Logout support ... Implement OIDC Back-Channel Logout 1.0 (RFC). When enabled, the IdP can POST a signed logout_token JWT to invalidate user sessions server-side. - Add BackchannelLogoutHandler: JWT verification via jose, jti replay protection with bounded cache, session destruction by sub or sid - Add oidcSessionId column to sessions table with index for fast lookups - Add backchannel logout route (POST /auth/openid/backchannel-logout) - Notify connected clients via socket to redirect to login page - Add authOpenIDBackchannelLogoutEnabled toggle in schema-driven settings UI - Migration v2.34.0 adds oidcSessionId column and index - Polish settings UI: auto-populate loading state, subfolder dropdown options, KeyValueEditor fixes, localized descriptions via descriptionKey, duplicate key detection, success/error toasts - Localize backchannel logout toast (ToastSessionEndedByProvider) - OidcAuthStrategy tests now use real class via require-cache stubbing		2026-02-05 17:55:10 +01:00
..
EmailSettings.js	Update:Auth to use new user model	2024-08-10 15:46:04 -05:00
NotificationSettings.js	Add: Backup notification (#3225)	2024-08-18 14:32:05 -05:00
ServerSettings.js	Add OIDC Back-Channel Logout support	2026-02-05 17:55:10 +01:00