pixelfed

Author	SHA1	Message	Date
Your Name	462b4bc0da	Detect OOB oauth client when redirect_uri omitted on authorize	2 weeks ago
Daniel Supernault	33dce75f2c	Pint app/	4 weeks ago
Your Name	53759e3ad6	Prevent deletion of personal access OAuth client Fixes #6630 (partial — deletion causing broken PAT) If a user deletes the OAuth client that serves as the personal access client, all PAT creation breaks for the entire instance with a 500 error. Changes: - Add custom OAuthClientController@destroy that checks if the client has the personal_access grant type before allowing deletion - Returns 403 with a clear error message if deletion is blocked - Add confirmation dialog before client deletion in the frontend - Add error handling to show server error messages to the user This prevents accidental destruction of the PAT infrastructure.	4 weeks ago
Your Name	3d858af1fa	OAuth: Token endpoint response loses required no-store/no-cache headers when adding created_at	6 months ago
Daniel Supernault	ef803ae9b6	Fix oauth/token	6 months ago
Daniel Supernault	f6746aec8b	Update AuthServiceProvider	7 months ago
Daniel Supernault	52f5626530	Fix oauth	7 months ago
Daniel Supernault	374344754e	Lint	9 months ago
Daniel Supernault	8afbdb03a8	Fix oauth oob (urn:ietf:wg:oauth:2.0:oob) support. Fixes #2522	2 years ago