998d82643c
chore: new UI
2026-05-08 12:30:04 +01:00
f3ce407e9c
chore: bump dependency
2026-04-22 14:07:52 +01:00
4b4308650c
chore: bump deps.
2026-04-20 12:41:52 +01:00
425abe510a
Merge remote-tracking branch 'origin/main' into feat/yucca-integration
2026-04-20 10:55:40 +01:00
4ded06dbb7
test: web e2e tests
2026-04-20 10:46:48 +01:00
0b1188e42e
chore(server): separate ffmpeg arguments ( #27937 )
...
separate arguments
2026-04-18 15:33:44 +00:00
b8591cb591
feat(server): add OIDC logout URL override option ( #27389 )
...
* feat(server): add OIDC logout URL override option
- Added toggle and field consistent with existing mobile redirect URI override.
- Existing auto-discovery remains default.
- Update tests and docs for new feature.
* fix(server): changes from review for OIDC logout URL override
- Rename 'logoutUri' to 'endSessionEndpoint'
- Remove toggle, just use override if provided
- Moved field in settings UI
2026-04-18 04:18:21 +00:00
55f2b3b6a0
feat(server): add configurable OAuth prompt parameter ( #26755 )
...
* feat(server): add configurable OAuth prompt parameter
Add a `prompt` field to the OAuth system config, allowing admins to
configure the OIDC `prompt` parameter (e.g. `select_account`, `login`,
`consent`). Defaults to empty string (no prompt sent), preserving
backward compatibility.
This is useful for providers like Google where users want to be prompted
to select an account when multiple accounts are signed in.
Discussed in #20762
* chore: regenerate OpenAPI spec and clients for OAuth prompt field
* Adding e2e test cases
* feat: web setting
* feat: docs
---------
Co-authored-by: Jason Rasmussen <jason@rasm.me >
2026-04-17 21:20:07 +00:00
6798d5df32
fix(server): require at least one field to be set when updating memory ( #27842 )
...
* add zod util to require one field is set in some schemas. appy to update memory endpoint
* add test
2026-04-17 20:18:48 +00:00
a46e46452c
fix: run profile picture through thumbnail pipeline ( #27890 )
...
* fix: run profile picture through thumbnail pipeline
* fix: format
2026-04-17 16:15:59 -04:00
dbf30b77bf
feat(server): added backchannel logout api endpoint ( #26235 )
...
* feat(server): added backchannel logout api endpoint
* test(server): fixed e2e tests
* fix(server): fixed suggested changes by reviewer
* feat(server): created function invalidateOAuth
* fix(server): fixed session.repository.sql
* test(server): added unit tests for backchannelLogout function
* test(server): added e2e tests for oidc backchnnel logout
* docs(server): added documentation on backchannel logout url
* docs(server): fixed typo
* feat(server): minor improvements of the oidc backchannel logout
* test(server): fixed tests after merge with main
* fix(server): fixed e2e test file
* refactor(server): tiny refactor of validateLogoutToken
* chore: cleanup
* fix: tests
* fix: make jwks extractable
---------
Co-authored-by: Daniel Dietzler <mail@ddietzler.dev >
2026-04-17 18:45:33 +00:00
8afca348ff
fix: sanitize filenames before adding to zip ( #27893 )
...
* fix: sanitize filenames before adding to zip
* fix: lints
* chore: drop split()
2026-04-17 13:05:53 -04:00
2f8be45fe0
chore!: remove /api/server/theme endpoint ( #27880 )
...
chore: remove server/theme endpoint
2026-04-17 08:30:03 -04:00
7d181f0686
fix!: set duration to null when not present ( #26982 )
2026-04-17 11:57:10 +02:00
88bce52042
fix(deps): update dependency jose to v6 ( #27862 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Daniel Dietzler <mail@ddietzler.dev >
2026-04-16 18:36:07 +02:00
d046f16860
fix(oauth): normalize email claim to lowercase and trim before account lookup and registration ( #26841 )
...
* fix(oauth): normalize email claim to lowercase before account lookup and registration
* test(auth): add test for OAuth email case normalization
* chore: clean up
---------
Co-authored-by: Jason Rasmussen <jason@rasm.me >
2026-04-16 15:41:42 +00:00
88815a0345
chore(deps): update base-image to v202604141125 (major) ( #27858 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-04-16 15:40:40 +00:00
ac2ebcee37
chore: improve randomness of /search/random endpoint ( #27531 )
2026-04-16 14:36:05 +00:00
3356e81c85
fix!: do not allow insecure oauth requests by default ( #27844 )
...
* fix!: do not allow insecure oauth requests by default
* fix: format
* fix: make open-api
* fix: tests
* nit: casing
* chore: migration to allow insecure if current oauth uses http
2026-04-16 10:11:58 -04:00
5f5d3ea0ba
Merge remote-tracking branch 'origin/main' into feat/yucca-integration
2026-04-16 14:41:49 +01:00
fa828dddc9
chore: bump packages
...
Signed-off-by: izzy <me@insrt.uk >
2026-04-16 14:40:40 +01:00
e63df4121a
chore(deps): update dependency @types/node to ^24.12.2 ( #27856 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-04-16 13:12:38 +00:00
facd3bd331
fix: oauth issuerUrl validation ( #27848 )
2026-04-16 09:06:55 -04:00
20ddf2e7d2
fix(deps): update dependency nestjs-cls to v6 ( #27852 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-04-16 13:45:42 +02:00
7f0025b3fc
chore(deps): update dependency @types/nodemailer to v8 ( #27851 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-04-16 13:28:23 +02:00
21d0821ed2
chore: bump version
2026-04-16 12:19:04 +01:00
75025bb6be
Merge remote-tracking branch 'origin/main' into feat/yucca-integration
2026-04-16 12:04:38 +01:00
dd1712656d
chore: bump package depends
2026-04-16 11:58:20 +01:00
33605efd0e
chore: use persistent config storage
2026-04-16 11:19:31 +01:00
a69eecf3bc
chore!: remove without assets ( #27835 )
...
* chore!: remove without assets
* fix: linting and e2e
---------
Co-authored-by: Daniel Dietzler <mail@ddietzler.dev >
2026-04-15 18:34:22 -04:00
ac06514db5
feat: album map markers endpoint ( #27830 )
2026-04-15 15:58:34 -04:00
792cb9148b
chore!: rename API key schemas ( #27828 )
...
chore!: rename API schemas
2026-04-15 15:58:26 -04:00
8ee5d3039a
chore!: remove deviceId and deviceAssetId ( #27818 )
...
chore: remove deviceId and deviceAssetId
2026-04-15 15:00:33 -04:00
d410131312
chore!: remove old timeline sync endpoints ( #27804 )
2026-04-15 13:58:48 -04:00
5334a6254a
fix: make web build stage deterministic ( #27823 )
2026-04-15 19:31:23 +02:00
77f9e87bd3
feat: yucca integration
2026-04-15 15:17:19 +01:00
603fc7401f
fix: redirect original ( #27759 )
2026-04-15 15:43:09 +02:00
5f5e3344d5
chore!: remove unused token response param ( #27805 )
2026-04-15 00:58:00 -04:00
6da2d3d587
chore!: remove getRandom api endpoint ( #27780 )
...
* chore!: remove getRandom api endpoint
* chore: sync openapi
* fix: test
* chore: more cleanup
2026-04-14 21:32:12 -04:00
41d2d84b21
chore!: remove deprecated env variables ( #27802 )
2026-04-14 21:30:31 -04:00
6ba17bb86f
refactor!: remove my shared link dto ( #27023 )
...
refactor!: remove deprecated shared link apis
2026-04-14 20:58:02 -04:00
e1a84d3ab6
refactor!: remove replace asset ( #27022 )
2026-04-14 20:21:05 -04:00
7d8f843be6
refactor!: migrate class-validator to zod ( #26597 )
2026-04-14 23:39:03 +02:00
e4e2f586b5
fix(server): render storage template date/time tokens in UTC ( #24350 ) ( #26917 )
2026-04-14 18:45:14 +02:00
ca006c1569
fix(deps): update typescript-projects ( #27573 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Daniel Dietzler <mail@ddietzler.dev >
2026-04-14 11:41:09 +02:00
4e8e8304fd
fix(deps): update react-email monorepo (major) ( #27572 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-04-14 11:40:58 +02:00
95e57a24cb
chore: version v2.7.5
2026-04-13 14:27:31 +00:00
352f6ecc28
fix(server): add rate limit and deduplication to version check ( #27747 )
2026-04-13 12:35:46 +00:00
bee49cef02
chore: version v2.7.4
2026-04-10 16:32:26 +00:00
bc400d68ac
chore: move .tsbuildinfo file to dist folder ( #27682 )
2026-04-10 16:02:25 +02:00
izzy