Issues

• chore: independent security review

  P1securev1.0
  Task

  fells-code/seamless-auth-api#424 · Filter by author Bccorb opened on Oct 13, 2026 · v1.0

• feat: full export of users, organizations, credentials and config

  P1safev1.0
  Feature

  fells-code/seamless-auth-api#423 · Filter by author Bccorb opened on Oct 13, 2026 · v1.0

• feat: declarative config applied idempotently

  easyP1v1.0
  Feature

  fells-code/seamless-auth-api#422 · Filter by author Bccorb opened on Oct 13, 2026 · v1.0

• docs: upgrade and version-skew policy

  P1safev1.0
  Task

  fells-code/seamless-auth-api#421 · Filter by author Bccorb opened on Oct 13, 2026 · v1.0

• feat: stream audit events to a SIEM over OTLP and syslog

  P2securev0.22
  Feature

  fells-code/seamless-auth-api#420 · Filter by author Bccorb opened on Oct 13, 2026 · v0.22

• feat: pre-token and post-login hooks as HTTP callouts

  easyP2v0.22
  Feature

  fells-code/seamless-auth-api#419 · Filter by author Bccorb opened on Oct 13, 2026 · v0.22

• feat: signed, retried webhooks

  easyP1v0.22
  Feature

  fells-code/seamless-auth-api#418 · Filter by author Bccorb opened on Oct 13, 2026 · v0.22

• feat: custom claims

  easyP2v0.22
  Feature

  fells-code/seamless-auth-api#417 · Filter by author Bccorb opened on Oct 13, 2026 · v0.22

• feat: organization-scoped roles and permissions in the access token

  P1securev0.22
  Feature

  fells-code/seamless-auth-api#416 · Filter by author Bccorb opened on Oct 13, 2026 · v0.22

• feat: permissions mapped to roles

  P1securev0.22
  Feature

  fells-code/seamless-auth-api#415 · Filter by author Bccorb opened on Oct 13, 2026 · v0.22

• fix(oauth): share OAuth state across instances

  P2safev0.21
  Bug

  fells-code/seamless-auth-api#414 · Filter by author Bccorb opened on Oct 13, 2026 · v0.21

• feat(oauth): OIDC discovery for inbound providers

  easyP2v0.21
  Feature

  fells-code/seamless-auth-api#413 · Filter by author Bccorb opened on Oct 13, 2026 · v0.21

• chore(oidc): apply for the OpenID Foundation open source fee waiver and certify

  P2securev0.21
  Task

  fells-code/seamless-auth-api#412 · Filter by author Bccorb opened on Oct 13, 2026 · v0.21

• ci(oidc): run the OpenID conformance suite

  P1securev0.21
  Task

  fells-code/seamless-auth-api#411 · Filter by author Bccorb opened on Oct 13, 2026 · v0.21

• feat(oidc): enforce OAuth 2.1 and RFC 9700 defaults

  P1securev0.21
  Feature

  fells-code/seamless-auth-api#410 · Filter by author Bccorb opened on Oct 13, 2026 · v0.21

• feat(oidc): RP-initiated and back-channel logout

  P2securev0.21
  Feature

  fells-code/seamless-auth-api#409 · Filter by author Bccorb opened on Oct 13, 2026 · v0.21

• feat(oidc): refresh tokens and client credentials

  easyP1v0.21
  Feature

  fells-code/seamless-auth-api#408 · Filter by author Bccorb opened on Oct 13, 2026 · v0.21

• feat(oidc): application (client) management API

  easyP1v0.21
  Feature

  fells-code/seamless-auth-api#407 · Filter by author Bccorb opened on Oct 13, 2026 · v0.21

• feat(oidc): hosted login and consent pages with no-build branding

  easyP1v0.21
  Feature

  fells-code/seamless-auth-api#406 · Filter by author Bccorb opened on Oct 13, 2026 · v0.21

• feat(oidc): discovery, authorization code with PKCE, and userinfo

  easyP1v0.21
  Feature

  fells-code/seamless-auth-api#405 · Filter by author Bccorb opened on Oct 13, 2026 · v0.21

• docs(adr): OpenID Provider architecture

  easyP1v0.21
  Task

  fells-code/seamless-auth-api#404 · Filter by author Bccorb opened on Oct 13, 2026 · v0.21

• feat: dry-run a policy change against recent sign-ins

  P2safev0.20
  Feature

  fells-code/seamless-auth-api#403 · Filter by author Bccorb opened on Oct 13, 2026 · v0.20

• feat: draft, publish and roll back auth policy changes

  P2safev0.20
  Feature

  fells-code/seamless-auth-api#402 · Filter by author Bccorb opened on Oct 13, 2026 · v0.20

• feat: break-glass admin that no policy can disable

  P1safev0.20
  Feature

  fells-code/seamless-auth-api#401 · Filter by author Bccorb opened on Oct 13, 2026 · v0.20

• fix: refuse to delete a user's last sign-in method

  P1safev0.20
  Bug

  fells-code/seamless-auth-api#400 · Filter by author Bccorb opened on Oct 13, 2026 · v0.20