Davide Scaini 3394be4ee9 auth: add RS256 validation via JWKS (Phase 3) ...

When --oidc-issuer is set, validate tokens as RS256 id_tokens fetched
against bincio-auth's JWKS endpoint (cached for 1h). Falls back to
HS256 if the RS256 check fails, so existing sessions keep working
during the transition. DB session lookup is the final fallback.

New --oidc-issuer flag reads BINCIO_OIDC_ISSUER env var.

2026-06-03 15:43:44 +02:00

..

routers

feat: recurring budget entries (lazy materialise) + preferred Satispay badge

2026-06-03 10:47:58 +02:00

__init__.py

towards multi-user

2026-04-08 19:37:10 +02:00

cli.py

auth: add RS256 validation via JWKS (Phase 3)

2026-06-03 15:43:44 +02:00

db.py

feat: scheduled Strava sync + admin suspend/delete account

2026-05-08 10:36:21 +02:00

deps.py

auth: add RS256 validation via JWKS (Phase 3)

2026-06-03 15:43:44 +02:00

init_cmd.py

fix: bincio init always sets private:true even if index.json already exists

2026-04-10 15:26:11 +02:00

models.py

Add activity file downloads with per-activity download_disabled flag

2026-05-15 18:35:40 +02:00

server.py

feat: Support page with budget transparency (replaces About)

2026-06-03 10:34:18 +02:00

tasks.py

perf: run all background build/merge/rsync subprocesses at nice 19

2026-05-24 19:07:23 +02:00