v5.5.4

What's Changed

• fix(api): add missing /api prefix to inter-service routes by @BK1031 in #74
• feat(oauth): auto-skip consent for recent re-auth, drop prompt URL param by @BK1031 in #75

Full Changelog: v5.5.3...v5.5.4

v5.5.3

What's Changed

• fix(saml): emit assertion timestamps in UTC (Zulu) form by @BK1031 in #73

Full Changelog: v5.5.2...v5.5.3

v5.5.2

What's Changed

• fix(saml): nil-deref panic on assertion build (req.HTTPRequest) by @BK1031 in #72

Full Changelog: v5.5.1...v5.5.2

v5.5.1

What's Changed

• fix(saml): resolve SP by entityID via request body, not path param by @BK1031 in #71

Full Changelog: v5.5.0...v5.5.1

v5.5.0

What's Changed

• feat: SAML 2.0 IdP service (SP-initiated Web SSO) by @BK1031 in #70

Full Changelog: v5.4.4...v5.5.0

v5.4.4

What's Changed

• feat(groups): gate join button on DIRECT source and membership by @BK1031 in #68
• refactor: replace rincon with kerbecs admin resolver by @BK1031 in #69

Full Changelog: v5.4.3...v5.4.4

v5.4.3

What's Changed

• feat(oauth): access-denied page instead of redirect on gate failure by @BK1031 in #67

Full Changelog: v5.4.2...v5.4.3

v5.4.2

Full Changelog: v5.4.1...v5.4.2

v5.4.1

What's Changed

• fix(oauth): app group links via internal route (empty groups + access-gate bypass) by @BK1031 in #66

Full Changelog: v5.4.0...v5.4.1

v5.4.0

What's Changed

• feat(oauth): group names + ids in claims, accept offline_access by @BK1031 in #65

Full Changelog: v5.3.0...v5.4.0