feat: Phising resistant MFA - #39760

Merged

dionisio-bot[bot] merged 54 commits into

feat/phishing-resistant-mfa

May 20, 2026

Commits on Mar 20, 2026

add deprecation warning
yash-rajpal
committed
2243b8a

Commits on Mar 27, 2026

chore: Passport login UI (#39848)
yash-rajpal
authored
b0cd754
feat: Configure Passport (#39604)
yash-rajpal
authored
6889133

Commits on Apr 1, 2026

merge develop and fix conflicts
yash-rajpal
committed
a85ee03

Commits on Apr 7, 2026

Merge branch 'develop' into feat/phishing-resistant-mfa
yash-rajpal
authored
9313bce

Commits on Apr 8, 2026

fix express user typing
yash-rajpal
committed
b1b3d94
use site url instead of meteor absolute url
yash-rajpal
committed
ae49afb

Commits on Apr 15, 2026

fix async login token creation
yash-rajpal
committed
ed170a8
oops
yash-rajpal
committed
c558ae5
merge develop and fix conflicts
yash-rajpal
committed
5628302
failure debugging
yash-rajpal
committed
a01dcdb
use flash for error debugging
yash-rajpal
committed
3ad63c7

Commits on Apr 20, 2026

merge develop
yash-rajpal
committed
55d5a48
lint
yash-rajpal
committed
be66f93

Commits on Apr 21, 2026

chore: Passport Google OAuth (#40222)
yash-rajpal
authored
4e185c8
trust proxy
yash-rajpal
committed
c874372

Commits on Apr 24, 2026

merge and conflicts
yash-rajpal
committed
7294f3c

Commits on May 11, 2026

merge develop and fix conflicts
yash-rajpal
committed
a0b3c2c

Commits on May 15, 2026

feat: Custom OAuth using Passport (#40203)
yash-rajpal
authored
500e008

Commits on May 18, 2026

custom OAuth auto publish fields
yash-rajpal
committed
aa3602b
chore: LinkedIn custom OAuth (#40594)
yash-rajpal
authored
6e42e87
feat: Deeplink login for Mobile and Desktop clients (#40601)
yash-rajpal
authored
9a2d2b0
feat: Secret setting for express-sessions secret (#40602)

yash-rajpal
and
ricardogarim
authored
9cda3cf
chore: Passport Nextcloud OAuth (#40591)
yash-rajpal
authored
93af0a8
merge develop and fix conflict
yash-rajpal
committed
33e32b9
chore: Passport Meteor OAuth (#40595)
yash-rajpal
authored
c7f7306
me stupid
yash-rajpal
committed
80a082b

Commits on May 19, 2026

chore: Passport Github Enterprise OAuth (#40608)
yash-rajpal
authored
afda09b
chore: Passport Gitlab OAuth (#40609)
yash-rajpal
authored
dc44d7c
chore: Passport Dolphin (#40611)
yash-rajpal
authored
f052ca8
chore: Passport Drupal OAuth (#40610)
yash-rajpal
authored
02fa86b
chore: Passport Wordpress OAuth (#40593)
yash-rajpal
authored
f709064
add rate limiter
yash-rajpal
committed
9509e9b
exclude saml, cas, ldap from login flow
yash-rajpal
committed
d394e16
express sessions mongo store
yash-rajpal
committed
df761f0
rate limit only oauth req
yash-rajpal
committed
30c5ee1
chore: Passport Twitter OAuth (#40563)
yash-rajpal
authored
161212e
feat: New 2FA flow for passport OAuth (#40106)
yash-rajpal
authored
77de0c2
Merge branch 'develop' into feat/phishing-resistant-mfa
yash-rajpal
authored
de91e8f
chore: Passport apple oauth (#40481)

yash-rajpal
and
KevLehman
authored
732fc12
Merge branch 'develop' into feat/phishing-resistant-mfa
yash-rajpal
authored
20db627

Commits on May 20, 2026

handle undefined client secrets
yash-rajpal
committed
bdb7a2e
Merge branch 'develop' into feat/phishing-resistant-mfa
yash-rajpal
authored
fb20370
fix oauth e2e tests
yash-rajpal
committed
540c2b6
isolate oauth middlewares
yash-rajpal
committed
88a8099
Merge branch 'develop' into feat/phishing-resistant-mfa
yash-rajpal
authored
1bb9ad4
spread profile for all fields
yash-rajpal
committed
5f2b140
restore /_oauth/provider callback structure
yash-rajpal
committed
8a9a965
fix review
yash-rajpal
committed
c1525a9
add changeset
yash-rajpal
committed
873daad
fix unused tokenObject
yash-rajpal
committed
d360cd2
remove unused deps
yash-rajpal
committed
0b99664
improve login redirect url handling
yash-rajpal
committed
396cf66
check for email method before sending email code
yash-rajpal
committed
2700a46