Issues

• feat: sender-constrained tokens with DPoP (RFC 9449)

  P2securev2.1
  fells-code/seamless-auth-api#512 · Filter by author Bccorb opened on Oct 29, 2026 · v2.1

• feat(oidc): token introspection and revocation endpoints (RFC 7662 and RFC 7009)

  P2securev0.21
  fells-code/seamless-auth-api#511 · Filter by author Bccorb opened on Oct 29, 2026 · v0.21

• feat(oidc): step-up that APIs can require, with acr, amr and auth_time (RFC 9470)

  P1securev0.21
  fells-code/seamless-auth-api#510 · Filter by author Bccorb opened on Oct 29, 2026 · v0.21

• feat(oidc): access tokens for a named API, with scopes (RFC 8707 and RFC 9068)

  P1securev0.21
  fells-code/seamless-auth-api#509 · Filter by author Bccorb opened on Oct 29, 2026 · v0.21

• feat(oidc): native and desktop public clients with loopback redirects (RFC 8252)

  P1securev0.21
  fells-code/seamless-auth-api#508 · Filter by author Bccorb opened on Oct 29, 2026 · v0.21

• chore(deps): consolidate JWT handling on jose

  P3securev1.0
  Task

  fells-code/seamless-auth-api#439 · Filter by author Bccorb opened on Oct 17, 2026 · v1.0

• ci: pin Actions by SHA and add OpenSSF Scorecard

  P3securev1.0
  Task

  fells-code/seamless-auth-api#438 · Filter by author Bccorb opened on Oct 17, 2026 · v1.0

• chore: independent security review

  P1securev1.0
  Task

  fells-code/seamless-auth-api#424 · Filter by author Bccorb opened on Oct 13, 2026 · v1.0

• feat: full export of users, organizations, credentials and config

  P1safev1.0
  Feature

  fells-code/seamless-auth-api#423 · Filter by author Bccorb opened on Oct 13, 2026 · v1.0

• feat: declarative config applied idempotently

  easyP1v1.0
  Feature

  fells-code/seamless-auth-api#422 · Filter by author Bccorb opened on Oct 13, 2026 · v1.0

• docs: upgrade and version-skew policy

  P1safev1.0
  Task

  fells-code/seamless-auth-api#421 · Filter by author Bccorb opened on Oct 13, 2026 · v1.0

• feat: stream audit events to a SIEM over OTLP and syslog

  P2securev0.22
  Feature

  fells-code/seamless-auth-api#420 · Filter by author Bccorb opened on Oct 13, 2026 · v0.22

• feat: pre-token and post-login hooks as HTTP callouts

  easyP2v0.22
  Feature

  fells-code/seamless-auth-api#419 · Filter by author Bccorb opened on Oct 13, 2026 · v0.22

• feat: signed, retried webhooks

  easyP1v0.22
  Feature

  fells-code/seamless-auth-api#418 · Filter by author Bccorb opened on Oct 13, 2026 · v0.22

• feat: custom claims

  easyP2v0.22
  Feature

  fells-code/seamless-auth-api#417 · Filter by author Bccorb opened on Oct 13, 2026 · v0.22

• feat: organization-scoped roles and permissions in the access token

  P1securev0.22
  Feature

  fells-code/seamless-auth-api#416 · Filter by author Bccorb opened on Oct 13, 2026 · v0.22

• feat: permissions mapped to roles

  P1securev0.22
  Feature

  fells-code/seamless-auth-api#415 · Filter by author Bccorb opened on Oct 13, 2026 · v0.22

• fix(oauth): share the OAuth state replay cache across instances

  P2safev0.21
  Bug

  fells-code/seamless-auth-api#414 · Filter by author Bccorb opened on Oct 13, 2026 · v0.21

• feat(oauth): OIDC discovery for inbound providers

  easyP2v0.21
  Feature

  fells-code/seamless-auth-api#413 · Filter by author Bccorb opened on Oct 13, 2026 · v0.21

• chore(oidc): apply for the OpenID Foundation open source fee waiver and certify

  P2securev0.21
  Task

  fells-code/seamless-auth-api#412 · Filter by author Bccorb opened on Oct 13, 2026 · v0.21

• ci(oidc): run the OpenID conformance suite

  P1securev0.21
  Task

  fells-code/seamless-auth-api#411 · Filter by author Bccorb opened on Oct 13, 2026 · v0.21

• feat(oidc): enforce OAuth 2.1 and RFC 9700 defaults

  P1securev0.21
  Feature

  fells-code/seamless-auth-api#410 · Filter by author Bccorb opened on Oct 13, 2026 · v0.21

• feat(oidc): RP-initiated and back-channel logout

  P2securev0.21
  Feature

  fells-code/seamless-auth-api#409 · Filter by author Bccorb opened on Oct 13, 2026 · v0.21

• feat(oidc): refresh tokens and client credentials

  easyP1v0.21
  Feature

  fells-code/seamless-auth-api#408 · Filter by author Bccorb opened on Oct 13, 2026 · v0.21

• feat(oidc): application (client) management API

  easyP1v0.21
  Feature

  fells-code/seamless-auth-api#407 · Filter by author Bccorb opened on Oct 13, 2026 · v0.21