Skip to content

AuthLab 0.2.0 Beta

Pre-release
Pre-release

Choose a tag to compare

View all tags
@humac humac released this 09 Mar 01:47
v0.2.0-beta
b9c3b32
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Highlights

  • Delivers the enterprise IdP workbench through Phase 4 across OIDC, SAML, inspector tooling, and SCIM provisioning.
  • Advances the product from the original Phase 1/2 beta cut to the current beta line now merged on the beta branch.

Included in 0.2.0 Beta

  • Phase 1 enterprise essentials:
    • custom OIDC authorization parameters
    • nonce generation and validation
    • RP-initiated logout
    • UserInfo retrieval
    • discovery metadata viewer
    • per-app SAML signing keys
    • SAML NameID, ForceAuthn, and IsPassive controls
    • DB-backed AuthRun session/result model
  • Phase 2 token lifecycle:
    • refresh token support
    • introspection and revocation
    • client credentials grant
    • PKCE S256, PLAIN, and NONE
    • token lifecycle timeline
    • JWT signature, at_hash, and c_hash validation views
  • Phase 3 enterprise SAML:
    • structured SAML assertion viewer
    • requested AuthnContextClassRef
    • signature algorithm selection
    • clock skew tolerance
    • SAML single logout
    • protocol-specific SAML inspector experience
  • Phase 4 advanced flows:
    • OIDC back-channel logout
    • Device Authorization grant
    • full auth trace logging
    • Token Exchange (RFC 8693)
    • PAR (Pushed Authorization Requests)
    • claims diff
    • SCIM mock endpoints with provisioning UI
  • UI and usability updates:
    • denser enterprise SaaS refresh
    • responsive table layouts for mobile
    • clearer team join-request/access UX
    • fixed team slug auto-generation
    • compact search/input control alignment

Notable Fixes

  • Fixed the SAML inspector rendering the OIDC lifecycle view.
  • Fixed idle session timeout redirect-loop behavior on Vercel.
  • Stabilized Playwright by switching E2E to a built-server harness.

Verification

  • npm run typecheck
  • npm run lint
  • npm run test:unit
  • npm run test:integration
  • npm run test:e2e
  • npm run test:security
  • npm run build:ci

Notes

  • This release remains a GitHub prerelease.
  • Remaining roadmap work is post-Phase-4 follow-up, including front-channel logout, session-management iframe support, richer SAML signature diagnostics, certificate expiry diagnostics, and protocol compliance reporting.
Assets 2
Loading