All pull requests

Pull requests

• [LOW] security(ci): pin the release npm version

  #1145·OskarEichler opened Sep 4, 2026·

  ·
  2

• [LOW] security(ci): limit workflow token permissions

  #1144·OskarEichler opened Sep 4, 2026·

  ·
  2

• [LOW] security(ci): pin actions to immutable revisions

  #1143·OskarEichler opened Sep 4, 2026·

  ·
  3

• [MEDIUM] security: block redirects carrying custom headers

  #1142·OskarEichler opened Sep 4, 2026·

  ·
  2

• [HIGH] security(ios): isolate OAuth URL sessions per request

  #1141·OskarEichler opened Sep 4, 2026·

  ·
  1

• [MEDIUM] security(android): prevent prefetch from blocking indefinitely

  #1140·OskarEichler opened Sep 4, 2026·

  ·
  2

• [HIGH] security(android): isolate interactive request state

  #1139·OskarEichler opened Sep 4, 2026·

  ·
  2

• [HIGH] security(android): clear custom headers between calls

  #1138·OskarEichler opened Sep 4, 2026·

  ·
  2

• fix(tooling): deduplicate internal-slot for iterator helpers

  #1136·OskarEichler opened Aug 28, 2026·

  ·
  2

• fix(types): expose supported options and the revocation response

  #1135·OskarEichler opened Aug 28, 2026·

  ·
  2

• fix(example): prevent overlapping auth actions and late UI updates

  #1134·OskarEichler opened Aug 28, 2026·

  ·
  1

• fix(expo): make native callback configuration reliable and repeatable

  #1133·OskarEichler opened Aug 28, 2026·

  ·
  1

• fix(android): preserve structured additional response parameters

  #1132·OskarEichler opened Aug 28, 2026·

  ·
  2

• fix: serialize registration timestamps and client URI correctly

  #1131·OskarEichler opened Aug 28, 2026·

  ·
  2

• fix: reject malformed headers and non-finite timeouts

  #1130·OskarEichler opened Aug 28, 2026·

  ·
  2

• fix: encode revocation requests and preserve discovery failures

  #1129·OskarEichler opened Aug 28, 2026·

  ·
  2

• fix(android): dispose AuthorizationService to stop Custom Tabs bind leak

  #1127·pranshuchittora opened Aug 10, 2026·

  ·
  1

  2

• fix(iOS): omit state when additionalParameters.state is null

  #1125·shashank-bhatotia opened Jul 28, 2026·

  ·
  2

• feat(ios): natively intercept https redirect URIs via ASWebAuthenticationSession callback (iOS 17.4+)

  #1122·danchily2 opened Jun 5, 2026·

  ·
  1

  8

• feat(android): opt-in Partial Custom Tab via androidCustomTabPartialHeightFraction

  #1119·omeratt opened May 22, 2026·

  ·
  1

  5

• Add claims parameter to authorize

  enhancementhelp wanted
  #1045·frereit opened Dec 13, 2024·

  ·
  8

• Edge browser support

  needs-more-info
  #1011·macos107 opened Jul 31, 2024·

  ·
  5

• feat(macos): support react-native-macos

  #1002·shirakaba opened Jul 22, 2024·

  ·
  1

  34

• fix: iOS crash when scenes are enabled

  needs-more-infoneeds-repro
  #995·kononenkoAnton opened Jun 25, 2024·

  ·
  7

• Fix/android app crash on authorize

  bugnon-standard flowon hold
  #743·nachoperez714 opened Jun 23, 2022·

  ·
  1

  19