Balaji Vijayakumar f815e4a83f feat(auth): add OIDC SSO login ...

Adds an OpenID Connect relying-party login path (PKCE authorization-code
flow) against a single env-configured identity provider — additive to
password/passkey login by default, with an operator opt-in (OIDC_ONLY,
enforced server-side on every auth route) to disable them entirely.
First-time sign-in auto-provisions or links an account by verified email.

Closes an open redirect in the post-login `next` parameter (both the new
OIDC path and the pre-existing password/passkey flow shared the same
backslash-normalization bypass) by resolving the target through a real
URL parse and comparing origins instead of a prefix check.

2026-07-13 16:33:13 +05:30

..

admin.ts

feat(ai): add operator-shared central Codex connection with per-user opt-in

2026-07-10 00:10:56 +02:00

allergies.ts

feat(records): CRUD API + OpenAPI for allergies and family history

2026-06-28 16:03:05 +02:00

auth.ts

feat(auth): add OIDC SSO login

2026-07-13 16:33:13 +05:30

coach.ts

feat(coach): surface plan proposals for confirmation and add the plans page

2026-07-05 20:00:38 +02:00

custom-metrics.ts

feat(measurements): add custom metrics (define, log, chart)

2026-06-30 08:54:39 +02:00

cycle.ts

refactor(openapi,queries): feature-located registries behind thin indexes

2026-06-11 00:10:00 +02:00

dashboard.ts

feat(coach): goal / if-then plan memory + locale-keyed dashboard snapshot

2026-06-27 01:25:35 +02:00

documents.ts

feat(documents): add the AI-settings toggle to read documents automatically

2026-07-09 10:55:01 +02:00

environment.ts

feat(environment): add opt-in module, settings surface, API, and nightly fetch

2026-06-28 16:58:52 +02:00

family-history.ts

feat(records): CRUD API + OpenAPI for allergies and family history

2026-06-28 16:03:05 +02:00

illness.ts

perf(illness): compute the recovery gap lazily and gate it on signal density

2026-06-20 11:58:39 +02:00

index.ts

feat(measurements): add custom metrics (define, log, chart)

2026-06-30 08:54:39 +02:00

insights.ts

chore(release): v1.28.21 — sleep history heals itself; plateau context; sync diagnostics

2026-07-10 21:23:00 +02:00

integrations.ts

feat(strava): add per-user BYO-OAuth workout source + Garmin indirect-path docs

2026-07-09 21:25:25 +02:00

labs.ts

fix(labs): paginate the biomarker reading feed

2026-06-28 18:30:39 +02:00

measurement-reminders.ts

style: apply prettier across the tree

2026-06-19 22:20:31 +02:00

measurements.ts

feat(vorsorge): drop trend strip, relative last-done, discreet due status

2026-06-20 11:54:11 +02:00

medications.ts

feat(medications): Wirkung tab + Insights efficacy summary

2026-07-09 13:02:02 +02:00

mental-health.ts

feat(mental-health): opt-in PHQ-9 / GAD-7 screeners with item-9 crisis signposting

2026-06-28 15:47:39 +02:00

mood.ts

feat(mood): tags get groups, icons and a home of their own

2026-06-12 22:03:01 +02:00

settings.ts

feat(privacy): add a Data & Privacy dashboard

2026-06-27 21:50:30 +02:00

workouts.ts

refactor(openapi,queries): feature-located registries behind thin indexes

2026-06-11 00:10:00 +02:00