lastlogin-io / obligator

Simple and opinionated OpenID Connect server designed for self-hosters

lastlogin-io/obligator Issues

Refresh token support?
Closed 11 days ago9
Implement refresh tokens
Updated 12 days ago
usage with cli tools
Closed 14 days ago2
lastlogin.io demo sends emails with invalid magic links
Updated a month ago8
[feedback] Kanidm comparison table line items
Closed a month ago4
Using Obligator to protect apps
Updated 2 months ago7
Provide some sort of username in /userinfo
Closed 3 months ago1
Add Impersonation?
Updated 5 months ago2
TLSAuth parameter for SMTP
Updated 5 months ago1
Implement dynamic client registration
Closed 7 months ago1
Implement copying logins when sharing via QR
Closed 7 months ago1
Fix QR issues
Closed 7 months ago1
Add Portier to the table
Closed 7 months ago1
Need to properly validate URL params at token endpoint. Currently only requiring the code
Updated 7 months ago
Add proper lifetimes to JWT cookies
Closed 7 months ago
Encrypt all cookies
Updated 7 months ago
Implement login cookie editor
Updated 7 months ago
Document that obligator intentionally violates draft-ietf-oauth-security-topics-24 4.1.3 by allowing any redirect URI that is a suffix of the client_id domain
Updated 7 months ago
Should probably just remove the state parameter for upstream requests
Updated 7 months ago
Consider adding OpenZiti for application-embedded security
Closed 7 months ago1
suggestion for future consideration: WebAuthN FIDO2 (passkeys)
Updated 7 months ago1
Implement scoping control for all cookies
Updated 7 months ago
Docker repo is 404
Closed 8 months ago2
Maybe add https://github.com/panva/node-oidc-provider to the table
Updated 8 months ago
Compare with IdentityServer
Updated 8 months ago