Releases · RESOAuth/smart-access-gateway

What's Changed

Add “Remember me” to the email sign-in form
Update scorecard.yml to allow manual trigger
Update scorecard.yml to correct workflow dispatch
Harden dependency installation and error handling
Add OpenSSF Best Practices evidence and supporting process docs
chore(docker): bump node from aadf416 to 2d984a1 in the docker group by @dependabot[bot] in #8
chore(ci): bump the actions group with 3 updates by @dependabot[bot] in #9
Support sealed environment variables via KMS, Secrets Manager and SSM
Back off from a peer JWKS fetch that just failed
Roll the session idle timeout forward when a session is used
Remove PROMPT_NONE_SHARED_SESSION, which never did anything
Keep rejected configuration values out of /healthz
Bound what a common upstream may assert
Default CORS on /token and /userinfo to every origin
Make outbound calls work on Workers: system DNS, and the fetch option that broke everything
Reject unsafe logout links and tunneled private IPs
Stop a peered deployment publishing a JWKS with a peer's keys missing

Full Changelog: v0.1.0...v0.2.0