onfranciis/OID

Dependency-audit CVE ignore has no tracking mechanism or expiry 19 days ago

enhancement good first issue osn-sprint-26

4

OID is an internal OpenID Connect (OIDC) identity provider, a self-hosted auth/SSO service for managing internal applications.

TypeScript

#auth#better-auth#nestjs#oauth2#oidc#oidc-server#osn-sprint-26#public#react#typescript

.env.example is missing the documented BETTER_AUTH_CONSENT_PATH variable 19 days ago

enhancement good first issue osn-sprint-26

onfranciis/OID

4

OID is an internal OpenID Connect (OIDC) identity provider, a self-hosted auth/SSO service for managing internal applications.

TypeScript

#auth#better-auth#nestjs#oauth2#oidc#oidc-server#osn-sprint-26#public#react#typescript

admin.guard.ts has no dedicated test file 19 days ago

enhancement good first issue osn-sprint-26

onfranciis/OID

4

OID is an internal OpenID Connect (OIDC) identity provider, a self-hosted auth/SSO service for managing internal applications.

TypeScript

#auth#better-auth#nestjs#oauth2#oidc#oidc-server#osn-sprint-26#public#react#typescript

Unvalidated x-request-id header echoed into logs and responses 19 days ago

enhancement good first issue osn-sprint-26

onfranciis/OID

4

OID is an internal OpenID Connect (OIDC) identity provider, a self-hosted auth/SSO service for managing internal applications.

TypeScript

#auth#better-auth#nestjs#oauth2#oidc#oidc-server#osn-sprint-26#public#react#typescript

Duplicated cookie-parsing logic copy-pasted across 4 files 19 days ago

enhancement good first issue osn-sprint-26

onfranciis/OID

4

OID is an internal OpenID Connect (OIDC) identity provider, a self-hosted auth/SSO service for managing internal applications.

TypeScript

#auth#better-auth#nestjs#oauth2#oidc#oidc-server#osn-sprint-26#public#react#typescript

RefreshTokenService.revokeFamily updates rows one-by-one instead of a single batched UPDATE 19 days ago

enhancement good first issue osn-sprint-26

onfranciis/OID

4

OID is an internal OpenID Connect (OIDC) identity provider, a self-hosted auth/SSO service for managing internal applications.

TypeScript

#auth#better-auth#nestjs#oauth2#oidc#oidc-server#osn-sprint-26#public#react#typescript

Missing indexes on hot foreign-key/lookup columns cause full table scans 19 days ago

bug good first issue osn-sprint-26

onfranciis/OID

4

OID is an internal OpenID Connect (OIDC) identity provider, a self-hosted auth/SSO service for managing internal applications.

TypeScript

#auth#better-auth#nestjs#oauth2#oidc#oidc-server#osn-sprint-26#public#react#typescript

verify-migrations.ts leaks the temp verification database when a migration fails 19 days ago

bug good first issue osn-sprint-26

onfranciis/OID

4

OID is an internal OpenID Connect (OIDC) identity provider, a self-hosted auth/SSO service for managing internal applications.

TypeScript

#auth#better-auth#nestjs#oauth2#oidc#oidc-server#osn-sprint-26#public#react#typescript

setUserStatus doesn't validate the UserStatus enum before writing to the DB 19 days ago

bug good first issue osn-sprint-26

onfranciis/OID

4

OID is an internal OpenID Connect (OIDC) identity provider, a self-hosted auth/SSO service for managing internal applications.

TypeScript

#auth#better-auth#nestjs#oauth2#oidc#oidc-server#osn-sprint-26#public#react#typescript

/health endpoint always reports status: 'ok' even when the database is down 19 days ago

bug good first issue osn-sprint-26

onfranciis/OID

4

OID is an internal OpenID Connect (OIDC) identity provider, a self-hosted auth/SSO service for managing internal applications.

TypeScript

#auth#better-auth#nestjs#oauth2#oidc#oidc-server#osn-sprint-26#public#react#typescript

HTTP status code leaks account status, enabling user enumeration 19 days ago

bug good first issue osn-sprint-26

onfranciis/OID

4

OID is an internal OpenID Connect (OIDC) identity provider, a self-hosted auth/SSO service for managing internal applications.

TypeScript

#auth#better-auth#nestjs#oauth2#oidc#oidc-server#osn-sprint-26#public#react#typescript

Backend returnTo sanitizer misses protocol-relative URLs (open-redirect gap) 19 days ago

bug good first issue osn-sprint-26

onfranciis/OID

4

OID is an internal OpenID Connect (OIDC) identity provider, a self-hosted auth/SSO service for managing internal applications.

TypeScript

#auth#better-auth#nestjs#oauth2#oidc#oidc-server#osn-sprint-26#public#react#typescript

Admin password change doesn't revoke other active sessions/refresh tokens 19 days ago

bug good first issue osn-sprint-26

onfranciis/OID

4

OID is an internal OpenID Connect (OIDC) identity provider, a self-hosted auth/SSO service for managing internal applications.

TypeScript

#auth#better-auth#nestjs#oauth2#oidc#oidc-server#osn-sprint-26#public#react#typescript

Admin-registered redirect URIs allow plaintext http:// with no loopback restriction 19 days ago

bug good first issue osn-sprint-26

onfranciis/OID

4

OID is an internal OpenID Connect (OIDC) identity provider, a self-hosted auth/SSO service for managing internal applications.

TypeScript

#auth#better-auth#nestjs#oauth2#oidc#oidc-server#osn-sprint-26#public#react#typescript

Client secret comparisons use non-constant-time string equality 19 days ago

bug good first issue osn-sprint-26

onfranciis/OID

4

OID is an internal OpenID Connect (OIDC) identity provider, a self-hosted auth/SSO service for managing internal applications.

TypeScript

#auth#better-auth#nestjs#oauth2#oidc#oidc-server#osn-sprint-26#public#react#typescript

Open Issues Need Help