Skip to content

refactor: rework auth and session layer - #1235

Draft
steveiliop56 wants to merge 9 commits into
mainfrom
refactor/sessions-csrf
Draft

steveiliop56 wants to merge 9 commits into
mainfrom
refactor/sessions-csrf

Conversation

@steveiliop56

@steveiliop56 steveiliop56 commented Nov 10, 2026 •

Copy link
Copy Markdown
Member

Summary by CodeRabbit

  • New Features
    • Added configurable account linking by username, email, or both.
    • Updated sign-in and session handling across local, LDAP, OAuth, and Tailscale authentication.
  • Bug Fixes
    • Login links now avoid an unnecessary trailing question mark when no query parameters are present.
    • Generated OAuth credentials and OIDC tokens now use secure random values.
  • Important
    • The session database migration logs out existing users, who will need to sign in again.

@coderabbitai

coderabbitai Bot commented Nov 10, 2026 •

Copy link
Copy Markdown
Contributor

Explain Change →

Important

Draft PR not reviewed

Draft PRs are not automatically reviewed by default.

  • Trigger a manual review

To automatically review draft PRs, update your CodeRabbit configuration:

reviews:
  auto_review:
    drafts: true
Walkthrough

[!WARNING]
Review details and warnings were omitted to fit the comment limit.

  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

Share

@steveiliop56
steveiliop56 marked this pull request as draft November 10, 2026 21:05
@steveiliop56 steveiliop56 added this to the v5.3.0 milestone Nov 12, 2026

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant