0 Releases 48 Tags

RSS Feed

• v0.3.0 dd047ebb1c

  Compare

  summercms v0.3.0: OpenID Connect provider flavour for wristband

  jakub released this 2026-10-19 23:26:39 +00:00 | 707 commits to master since this release

  • wristband gains an OIDC flavour (NewOIDCServer): discovery, JWKS with
    RS256/ES256 and key rotation, id_token with nonce and at_hash, userinfo,
    resumable authorize with consent and account switching, pairwise
    subjects, opt-in refresh tokens.
  • Admin file uploads: a public image whose URL fails to load is previewed
    through the authenticated thumb route, which now serves public images.

  Upgrade note: wristband.Options.Resource no longer has a default. Apps
  using the MCP flavour must set it; while it is empty, an authorization
  request that sends resource is refused with invalid_target.

  Downloads

  • Source Code (ZIP)
  • Source Code (TAR.GZ)