3 people 8e82ec1cb9 Merge commit from fork ...

* Add DenyLists parsing

* Remove unneeded returned error

* Plug global denylist into Command

* app creation: apply denylist to backchannel logout URI

* Inject denylist to backchannel logout worker

* webhook config: validate against blocked URLs

* Add notificationsWebhook denylist target

* command: Add SMTP endpoint validation against blocklist

* command: Add SMS endpoint validation against blocklist

* Validate webhook endpoint against denylist on channel notification

* Remove unused tests

* handle deprecated denylists

* remove unintended denylist entry in deprecated list

* use single http client

* fix tests

* update comments

* fixes

* cleanup

* address comments

* fix merge

---------

Co-authored-by: Livio Spring <9405495+livio-a@users.noreply.github.com>

2026-06-15 15:36:14 +02:00

..

auth_request_converter_v2.go

feat: add saml request to link to sessions (#9001)

2024-12-19 11:11:40 +00:00

auth_request_converter.go

refactor: rename package errors to zerrors (#7039)

2023-12-08 15:30:55 +01:00

auth_request.go

fix: SAML and OIDC issuer (in proxied use cases) (#9638)

2025-03-26 17:08:13 +00:00

certificate.go

chore(oidc): graduate webkey to stable (#10122)

2025-06-26 19:17:45 +03:00

provider.go

Merge commit from fork

2026-06-15 15:36:14 +02:00

serviceprovider.go

chore: naming inconsistency application (#11431)

2026-02-04 07:20:07 +00:00

storage.go

Merge commit from fork

2026-06-15 15:36:14 +02:00