Davide Scaini 3394be4ee9 auth: add RS256 validation via JWKS (Phase 3) ...

When --oidc-issuer is set, validate tokens as RS256 id_tokens fetched
against bincio-auth's JWKS endpoint (cached for 1h). Falls back to
HS256 if the RS256 check fails, so existing sessions keep working
during the transition. DB session lookup is the final fallback.

New --oidc-issuer flag reads BINCIO_OIDC_ISSUER env var.

2026-06-03 15:43:44 +02:00

..

edit

Settings: per-user default for download_disabled

2026-05-16 20:51:23 +02:00

extract

fix: handle empty/invalid athlete.json in merge, API read, and writer encoding

2026-05-25 20:00:18 +02:00

import_

Strava sync: skip import when a FIT-file upload already covers the same start time

2026-05-13 21:52:07 +02:00

render

fix: skip empty or unparseable athlete.json in merge_all

2026-05-25 19:55:08 +02:00

segments

segments detect: add --fresh flag to clear efforts before re-detecting

2026-05-14 17:11:11 +02:00

serve

auth: add RS256 validation via JWKS (Phase 3)

2026-06-03 15:43:44 +02:00

shared

Refactor: extract shared image upload utilities into bincio/shared/images.py

2026-05-13 23:13:08 +02:00

__init__.py

backend: initial commit

2026-03-28 13:59:36 +01:00

cli.py

Add headless Garmin background sync (systemd timer)

2026-05-16 20:13:12 +02:00

dev.py

dev: fix _start_serve to set deps.data_dir/site_dir (not srv.*) after Step 3 split

2026-05-14 00:09:41 +02:00

explore.py

explore: shard tracks into per-year files for progressive loading

2026-05-14 18:34:53 +02:00

reextract_cmd.py

reextract: process in batches of 100 to bound subprocess memory

2026-04-15 10:08:55 +02:00

sync_garmin.py

Add headless Garmin background sync (systemd timer)

2026-05-16 20:13:12 +02:00

sync_strava.py

Add Strava sync status report and manual trigger to admin panel

2026-05-08 13:44:23 +02:00