Search results

Feature: OIDC groups claim support for group-based authorization (Pinniped / k8s RBAC)

enhancementNew feature or requestNew feature or request

Status: Open.

#234 In go-authgate/authgate;

· appleboy opened on Jun 2, 2026

[Tracking] Security & correctness hardening from full code review

goPull requests that update go codePull requests that update go code

securitySecurity-relevant fixSecurity-relevant fix

Status: Open.

#230 In go-authgate/authgate;

· appleboy opened on May 31, 2026

refactor: centralize per-grant client auth, user re-check, resource narrowing, issuance audit

enhancementNew feature or requestNew feature or request

goPull requests that update go codePull requests that update go code

Status: Open.

#229 In go-authgate/authgate;

· appleboy opened on May 31, 2026

bug: handle provider error param in the OAuth callback

bugSomething isn't workingSomething isn't working

goPull requests that update go codePull requests that update go code

Status: Open.

#228 In go-authgate/authgate;

· appleboy opened on May 31, 2026

security: don't expose /metrics unauthenticated when METRICS_TOKEN is empty

bugSomething isn't workingSomething isn't working

goPull requests that update go codePull requests that update go code

securitySecurity-relevant fixSecurity-relevant fix

Status: Open.

#227 In go-authgate/authgate;

· appleboy opened on May 31, 2026

bug: RevokeUserAuthorization returns stale record & skips RowsAffected check

bugSomething isn't workingSomething isn't working

goPull requests that update go codePull requests that update go code

Status: Open.

#226 In go-authgate/authgate;

· appleboy opened on May 31, 2026

bug: case-insensitive email matching to prevent duplicate accounts

bugSomething isn't workingSomething isn't working

goPull requests that update go codePull requests that update go code

Status: Open.

#225 In go-authgate/authgate;

· appleboy opened on May 31, 2026

security: treat nil/invalid session idle-timestamp & fingerprint as invalid

bugSomething isn't workingSomething isn't working

goPull requests that update go codePull requests that update go code

securitySecurity-relevant fixSecurity-relevant fix

Status: Open.

#224 In go-authgate/authgate;

· appleboy opened on May 31, 2026

bug: handle crypto/rand error in generateUserCode (avoid nil deref)

bugSomething isn't workingSomething isn't working

goPull requests that update go codePull requests that update go code

Status: Open.

#223 In go-authgate/authgate;

· appleboy opened on May 31, 2026

security: make /logout CSRF-safe (POST or CSRF token)

bugSomething isn't workingSomething isn't working

goPull requests that update go codePull requests that update go code

securitySecurity-relevant fixSecurity-relevant fix

Status: Open.

#222 In go-authgate/authgate;

· appleboy opened on May 31, 2026

bug: require non-empty code_challenge for public clients at /authorize (PKCE)

bugSomething isn't workingSomething isn't working

goPull requests that update go codePull requests that update go code

Status: Open.

#221 In go-authgate/authgate;

· appleboy opened on May 31, 2026

bug: audit batch dropped on transient DB error (retry / preserve buffer)

bugSomething isn't workingSomething isn't working

goPull requests that update go codePull requests that update go code

Status: Open.

#220 In go-authgate/authgate;

· appleboy opened on May 31, 2026