You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Johnny 1a9bd32cf1 feat(auth): add PKCE support and enhance OAuth security ... Implements critical OAuth 2.0 security improvements to protect against authorization code interception attacks and improve provider compatibility: - Add PKCE (RFC 7636) support with SHA-256 code challenge/verifier - Fix access token extraction to use standard field instead of Extra() - Add OAuth error parameter handling (access_denied, invalid_scope, etc.) - Maintain backward compatibility for non-PKCE flows This brings the OAuth implementation up to modern security standards as recommended by Auth0, Okta, and the OAuth 2.0 Security Best Current Practice (RFC 8252). Backend changes: - Add code_verifier parameter to ExchangeToken with PKCE support - Use token.AccessToken for better provider compatibility - Update proto definition with optional code_verifier field Frontend changes: - Generate cryptographically secure PKCE parameters - Include code_challenge in authorization requests - Handle and display OAuth provider errors gracefully - Pass code_verifier during token exchange 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <noreply@anthropic.com>		7 months ago
..
activity_service.pb.go	refactor(api): migrate inbox functionality to user notifications	8 months ago
activity_service.pb.gw.go	refactor: rename session methods in auth service	1 year ago
activity_service_grpc.pb.go	refator: activity service	1 year ago
attachment_service.pb.go	feat: enhance memo sorting functionality to support multiple fields	8 months ago
attachment_service.pb.gw.go	refactor: rename session methods in auth service	1 year ago
attachment_service_grpc.pb.go	refactor: attachment service	1 year ago
auth_service.pb.go	feat(auth): add PKCE support and enhance OAuth security	7 months ago
auth_service.pb.gw.go	chore: update auth service	1 year ago
auth_service_grpc.pb.go	chore: tweak auth service	1 year ago
common.pb.go	feat: enhance memo sorting functionality to support multiple fields	8 months ago
idp_service.pb.go	refactor: rename workspace to instance throughout codebase	8 months ago
idp_service.pb.gw.go	refactor: rename workspace to instance throughout codebase	8 months ago
idp_service_grpc.pb.go	chore: buf generate	2 years ago
instance_service.pb.go	refactor: remove enable link preview setting	7 months ago
instance_service.pb.gw.go	refactor: rename workspace to instance throughout codebase	8 months ago
instance_service_grpc.pb.go	refactor: rename workspace to instance throughout codebase	8 months ago
memo_service.pb.go	refactor(api): remove DeleteMemoTag and RenameMemoTag endpoints	8 months ago
memo_service.pb.gw.go	refactor(api): remove DeleteMemoTag and RenameMemoTag endpoints	8 months ago
memo_service_grpc.pb.go	refactor(api): remove DeleteMemoTag and RenameMemoTag endpoints	8 months ago
shortcut_service.pb.go	feat: enhance memo sorting functionality to support multiple fields	8 months ago
shortcut_service.pb.gw.go	refactor: clean unused fields	1 year ago
shortcut_service_grpc.pb.go	refactor: shortcut service	1 year ago
user_service.pb.go	refactor(api): migrate inbox functionality to user notifications	8 months ago
user_service.pb.gw.go	refactor(api): migrate inbox functionality to user notifications	8 months ago
user_service_grpc.pb.go	refactor(api): migrate inbox functionality to user notifications	8 months ago