Commit Graph

Select branches

Hide Pull Requests

master

1.0.0

1.0.1

1.0.2

1.1.0

1.1.1

1.1.2

1.1.3

1.2.0

Mono Color

• d287e01b2a Git Ignoreness master Andy DixonandCopilot 2026-04-27 10:54:30 +01:00
• b2163ad996 Default allow_missing_nonce behavior 1.2.0 Andy Dixon 2026-04-27 10:50:50 +01:00
• 1d8578c1da Additional Improvements 1.1.3 Andy Dixon 2026-03-11 07:41:21 +00:00
• 986dc95646 Updated to enforce nonce in example and documentaion 1.1.2 Andy Dixon 2026-03-10 09:50:34 +00:00
• 6b67bf574d typo 1.1.1 Andy Dixon 2026-02-26 13:40:48 +00:00
• fc80ee1659 docs: add provider security model for sdk integrators 1.1.0 Andy Dixon 2026-02-26 13:38:45 +00:00
• 1d62f0affd docs: document refresh invalid_grant on scope tightening Andy Dixon 2026-02-26 13:34:42 +00:00
• ddc08270a7 docs: document invalid_scope handling and scope allowlist alignment Andy Dixon 2026-02-26 13:30:07 +00:00
• 32208c7701 docs: note cryptbin credential-binding requirements Andy Dixon 2026-02-26 13:25:20 +00:00
• 62544d86b4 docs: add CIDR trusted-proxy guidance Andy Dixon 2026-02-26 13:23:29 +00:00
• 35d58ff07b docs: add CSV import limit guidance for bulk admin flows Andy Dixon 2026-02-26 13:17:28 +00:00
• 464524da27 docs: note serialized decision behavior for approval actions Andy Dixon 2026-02-26 13:16:32 +00:00
• 8bb3c1ce12 docs: note JWT revocation-aware userinfo behavior Andy Dixon 2026-02-26 13:00:51 +00:00
• bbcada1317 docs: clarify idempotent retry expectations for approval flows Andy Dixon 2026-02-26 12:58:50 +00:00
• 878e2b98e6 docs: add reverse-proxy IP header hardening guidance Andy Dixon 2026-02-26 12:42:10 +00:00
• 6cc2ddabd0 docs: require non-URL handling for enrollment links Andy Dixon 2026-02-26 12:40:33 +00:00
• fb60a1eccb docs: document introspection active=false on disabled subjects Andy Dixon 2026-02-26 12:38:45 +00:00
• ebea82f63d docs: add CSV export formula-injection handling guidance Andy Dixon 2026-02-26 12:35:02 +00:00
• 3d3493e546 docs: require POST+CSRF for admin enrollment export calls Andy Dixon 2026-02-26 12:33:51 +00:00
• 822b9b93c5 docs: document cryptbin unwrap key proof requirement Andy Dixon 2026-02-26 12:31:11 +00:00
• ba8868cc12 docs: note stricter limits on high-cost report/export endpoints Andy Dixon 2026-02-26 12:28:11 +00:00
• 78606bf751 docs: note disabled projects may be omitted from assignment views Andy Dixon 2026-02-26 12:27:25 +00:00
• d97638201e docs: include consent-time access_denied for inactive accounts Andy Dixon 2026-02-26 12:26:45 +00:00
• df7ca1329e docs: note session invalidation behavior for disabled accounts Andy Dixon 2026-02-26 12:22:20 +00:00
• 8b7f11fc6a docs: note disabled-account failures during WebAuthn login verification Andy Dixon 2026-02-26 12:21:30 +00:00
• cdef7da4b9 docs: align state/nonce/PKCE format expectations with provider validation Andy Dixon 2026-02-26 12:07:18 +00:00
• f51997016d docs: note disabled-account access_denied outcomes during auth flow Andy Dixon 2026-02-26 12:06:19 +00:00
• 49265eee0f docs: note invalid_grant on inactive subject state during token exchange Andy Dixon 2026-02-26 12:05:06 +00:00
• 4d612b57f4 docs: require single OAuth client auth method per request Andy Dixon 2026-02-26 12:03:33 +00:00
• f9323110ce docs: prohibit URL query transport of secrets and tokens Andy Dixon 2026-02-26 12:02:21 +00:00
• 12cefe68e8 docs: clarify provider rate limits may be source-identity scoped Andy Dixon 2026-02-26 11:53:25 +00:00
• cb0bd43d04 docs: clarify end-user integrations should use OAuth/portal endpoints Andy Dixon 2026-02-26 11:52:41 +00:00
• 78a18ccfab docs: handle userinfo invalid_token outcomes in callback example Andy Dixon 2026-02-26 11:51:29 +00:00
• 7bb919a0a0 docs: recommend bounded retry/backoff for token exchange failures Andy Dixon 2026-02-26 11:48:40 +00:00
• 60f6989595 docs: add userinfo 429 backoff guidance Andy Dixon 2026-02-26 11:47:15 +00:00
• 066a0b8fb7 docs: require HTTPS redirect URIs except localhost loopback dev Andy Dixon 2026-02-26 11:46:31 +00:00
• d4a6418e5d docs: specify POST-only usage for provider WebAuthn challenge/verify endpoints Andy Dixon 2026-02-26 11:40:31 +00:00
• 7d0319332f docs: clarify callback access_denied causes include privilege changes Andy Dixon 2026-02-26 11:39:50 +00:00
• 44aa9e6f80 docs: note 429 backoff expectations for provider control endpoints Andy Dixon 2026-02-26 11:38:56 +00:00
• d8a28dea12 docs: document consent-time access_denied from provider revalidation Andy Dixon 2026-02-26 11:38:13 +00:00
• f529714f45 docs: handle OAuth callback access_denied outcomes from stricter provider authz Andy Dixon 2026-02-26 11:36:17 +00:00
• 6ddbcaec70 docs: add OIDC nonce guidance and callback error handling 1.0.2 Andy Dixon 2026-02-26 11:11:47 +00:00
• 3ff5b7aa26 Security hardening: enforce secure URLs and transport safeguards Andy Dixon 2026-02-26 09:10:09 +00:00
• 94c85fc8d5 Release 1.0.1: normalized userinfo and callback helper 1.0.1 Andy Dixon 2026-02-26 09:07:11 +00:00
• 1c7b7b6717 Update package name in installation instructions 1.0.0 Andy Dixon 2026-02-23 09:35:39 +00:00
• b39dbbe57f Rename package from blackwall-sdk to blackwall-auth-sdk Andy Dixon 2026-02-23 09:32:42 +00:00
• 5d66fa2351 Rename package from blackwall-auth-sdk to blackwall-sdk Andy Dixon 2026-02-23 09:31:43 +00:00
• 1ed5bd6bd3 Changed base blackwall URL Andy Dixon 2026-02-13 13:51:59 +00:00
• 7c283ed543 Update composer.json Andy Dixon 2026-02-10 09:23:22 +00:00
• cf3d644459 Update composer.json Andy Dixon 2026-02-10 09:22:52 +00:00
• ceb00510e0 Update composer.json Andy Dixon 2026-02-10 09:21:52 +00:00
• bbbc2dffae Update README.md Andy Dixon 2026-02-10 09:21:19 +00:00
• ef1f66385b Create LICENSE Andy Dixon 2026-02-10 09:18:52 +00:00
• 57637840a5 Initial Commit Andy Dixon 2026-02-10 09:17:22 +00:00