franz/forseti
Watch
1
0
Fork
You've already forked forseti
 0
Code Issues 2 Pull requests Projects Releases 34 Packages Wiki Activity
34 releases 34 tags
  • v0.1.23 c6a4196a58

    v0.1.23 Stable

    franz released this 2026-08-04 07:01:43 +00:00 | 27 commits to master since this release

    Signed by franz
    GPG key ID: 1B3418BA53820C4C

    Added

    • [oauth].allowed_resource_audiences binds RFC 8707 resource to the token audience
    • Dynamically registered clients get those audiences pre-registered

    Builds, checksums and provenance: https://github.com/franzos/forseti/releases/tag/v0.1.23

    Downloads
  • v0.1.22 936b1cbcdf

    v0.1.22 Stable

    franz released this 2026-08-03 16:45:17 +00:00 | 29 commits to master since this release

    Signed by franz
    GPG key ID: 1B3418BA53820C4C

    Added

    • [security].extra_form_action for sign-in destinations Forseti can't derive

    Security

    • A registered redirect URI could inject a directive into the sign-in page's CSP

    Fixed

    • Sign-in didn't return to the app when consent was skipped
    • Second-factor sign-in stalled on the challenge page
    • Social sign-in buttons never left the sign-in page
    • Linking an upstream provider from settings was blocked the same way

    Builds, checksums and provenance: https://github.com/franzos/forseti/releases/tag/v0.1.22

    Downloads
  • v0.1.21 8c112266d3

    v0.1.21 Stable

    franz released this 2026-08-02 07:21:58 +00:00 | 31 commits to master since this release

    Signed by franz
    GPG key ID: 1B3418BA53820C4C

    Changed

    • All dependencies updated to their latest releases

    Builds, checksums and provenance: https://github.com/franzos/forseti/releases/tag/v0.1.21

    Downloads
  • v0.1.20 46f0fb23ff

    v0.1.20 Stable

    franz released this 2026-08-01 18:26:40 +00:00 | 33 commits to master since this release

    Signed by franz
    GPG key ID: 1B3418BA53820C4C

    Fixed

    • No container image was published for 0.1.18 or 0.1.19

    Builds, checksums and provenance: https://github.com/franzos/forseti/releases/tag/v0.1.20

    Downloads
  • v0.1.19 69cd50646c

    v0.1.19 Stable

    franz released this 2026-08-01 17:53:37 +00:00 | 34 commits to master since this release

    Signed by franz
    GPG key ID: 1B3418BA53820C4C

    Fixed

    • Granting consent left the browser on an unchanged page (0.1.18 only)
    • Confirming an RP-initiated logout had the same failure (0.1.18 only)

    Builds, checksums and provenance: https://github.com/franzos/forseti/releases/tag/v0.1.19

    Downloads
  • v0.1.18 3bbaece03c

    v0.1.18 Stable

    franz released this 2026-08-01 16:38:03 +00:00 | 37 commits to master since this release

    Signed by franz
    GPG key ID: 1B3418BA53820C4C

    Added

    • Cancel a Linux login that was started for another account

    Security

    • Consent and device approval are bound to the signed-in session
    • Enrolled Linux hosts no longer receive Hydra's device code
    • The Linux PAM OAuth client can no longer be made public

    Fixed

    • Concurrent client registration reported a valid token as spent
    • Last-owner protection failed in organizations above 500 members

    Builds, checksums and provenance: https://github.com/franzos/forseti/releases/tag/v0.1.18

    Downloads
  • v0.1.17 889d67c191

    v0.1.17 Stable

    franz released this 2026-07-31 18:09:46 +00:00 | 48 commits to master since this release

    Signed by franz
    GPG key ID: 1B3418BA53820C4C

    Added

    • Ten UI languages: English, German, French, Spanish, Italian, Portuguese, Russian, Thai, Arabic and Chinese (Simplified)
    • User-chosen username, emitted as the preferred_username claim
    • Profile language picker lists every shipped locale

    Changed

    • Google and Apple email verification carries into Kratos, skipping verification mail
    • Microsoft organizations and consumers pseudo-tenants are now refused

    Fixed

    • Only English and German could be saved as a language preference
    • Legal-page strings were missing from the seven non-English/German locales

    Builds, checksums and provenance: https://github.com/franzos/forseti/releases/tag/v0.1.17

    Downloads
  • v0.1.16 170031b908

    v0.1.16 Stable

    franz released this 2026-07-30 22:15:03 +00:00 | 52 commits to master since this release

    Signed by franz
    GPG key ID: 1B3418BA53820C4C

    Added

    • Sign in with Apple, via forseti config oidc enable apple
    • Apple brand mark on the sign-in button

    Builds, checksums and provenance: https://github.com/franzos/forseti/releases/tag/v0.1.16

    Downloads
  • v0.1.15 3b8ba273aa

    v0.1.15 Stable

    franz released this 2026-07-26 15:10:10 +00:00 | 54 commits to master since this release

    Signed by franz
    GPG key ID: 1B3418BA53820C4C

    Added

    • Per-client logo, uploaded by an operator and shown on the consent screen

    Security

    • return_to values carrying control characters are rejected
    • Split cookie headers are joined before parsing
    • Claim-email decoy path now mirrors the real write

    Builds, checksums and provenance: https://github.com/franzos/forseti/releases/tag/v0.1.15

    Downloads
  • v0.1.14 72c675775f

    v0.1.14 Stable

    franz released this 2026-07-19 21:35:56 +00:00 | 58 commits to master since this release

    Signed by franz
    GPG key ID: 1B3418BA53820C4C

    Added

    • OAuth organization_id pin accepts an org slug as well as an id
    • Non-members are offered a one-time join into a pinned public org during app login
    • Sign-in link on the public org landing page

    Changed

    • Public org landing note now points to on-page sign-in/register

    Builds, checksums and provenance: https://github.com/franzos/forseti/releases/tag/v0.1.14

    Downloads