feat(auth): identity-based OIDC, Google and Plex login, user lifecycle - #613

Merged

lklynet merged 17 commits into

lklynet:mainfrom

aresthegodofwar:feat/oidc-identity-model

Sep 24, 2026

Commits on Aug 14, 2026

feat(auth): identity-based OIDC, Google and Plex login, user lifecycle
aresthegodofwar
committed
e758ba3
fix(auth): address code review findings on identity/login PR
aresthegodofwar
committed
bceea56
fix(auth): close Plex login session binding gap and legacy OIDC upgrade path
aresthegodofwar
committed
fa82544
fix(auth): require admin approval to claim legacy accounts via SSO
aresthegodofwar
committed
922d1c5
fix(auth): address further code review findings on identity/login PR
aresthegodofwar
committed
f826bef
fix(auth): surface refreshAuth failure after SSO code exchange
aresthegodofwar
committed
995d2ee
fix(auth): stop stranding accounts that already had an OIDC identity before the migration flag existed
aresthegodofwar
committed
28338ad
fix(auth): prompt for reauth when admin password reset needs it
aresthegodofwar
committed
6a20974
fix(auth): fall back to the OIDC UserInfo endpoint when the ID token omits profile claims
aresthegodofwar
committed
0b07d03

Commits on Sep 24, 2026

Merge origin/main into feat/oidc-identity-model
aresthegodofwar
committed
98b51d5
fix(auth): harden identity lifecycle and Plex unlinking
aresthegodofwar
committed
50d5d31
fix(auth): revoke active work for suspended users
aresthegodofwar
committed
2a7e6bb
fix(auth): clarify OIDC role authority
aresthegodofwar
committed
af3a974
fix(plex): atomically persist self links
aresthegodofwar
committed
2f3ac16
fix(auth): close final login lifecycle gaps
aresthegodofwar
committed
198cda9
fix(auth): pause inactive downloads and start Google links
aresthegodofwar
committed
6e6b8c0
Merge branch 'main' into feat/oidc-identity-model
lklynet
authored
0e23c44