Skip to content

pocket-id

Secrets & Credentials

An easy‑to‑use OpenID Connect Certified™ and OAuth 2.0 provider that authenticates users solely with passkeys, eliminating passwords.

Go Latest v2.11.0 · 13d ago Security brief →

Features

  • Provides OpenID Connect Certified™ and OAuth 2.0 authentication
  • Supports only passkey‑based login (no passwords required)
  • Simple, lightweight setup for self‑hosted environments

Recent releases

View all 16 releases →
Config change
v2.11.0 New feature
Auth

CIDR/IP support for TRUST_PROXY

Upgrade now
v2.10.0 Breaking risk
Auth Dependencies

Drop TOFU support

Review required
v2.9.0 Mixed
Auth Dependencies

RFC9126 + bug fixes

Review required
v2.8.0 Breaking risk
Auth Dependencies

Refresh token deletion

v2.7.0 Bug fix
Notable features
  • Added response_mode=form_post support
  • Added "select_account" prompt support
Full changelog

Bug Fixes

  • add _FILE support for S3_SECRET_ACCESS_KEY_FILE env var (#1452 by @ItalyPaleAle)
  • invalidate cache when changing image (#1462 by @GameTec-live)
  • fall back to Basic auth when PKCE puts client_id in body (#1466 by @mgabor3141)

Documentation

  • add missing /api prefix to app config swagger routes (#1454 by @aclerici38)

Features

  • add support for response_mode=form_post (#1360 by @Johnwulp)
  • add support for "select_account" prompt (#1453 by @ItalyPaleAle)

Other

  • add script to update deps (f9f93f0 by @stonith404)
  • upgrade dependencies (20df033 by @stonith404)
  • post dependency upgrade fixes (e33a9b8 by @stonith404)
  • migrate github actions runners to depot runners (#1329 by @kmendell)
  • fix caching of ldap-cli e2e tests docker build (#1457 by @kmendell)
  • fix incorrect container name variable (5c7e5f6 by @kmendell)

Full Changelog: https://github.com/pocket-id/pocket-id/compare/v2.6.2...v2.7.0

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

About

Stars
8,454
Forks
277
Languages
Go Svelte TypeScript

Install & Platforms

Install via
docker

Tracked by

1 person tracking

People also track

Alternative to

Keycloak ORY Hydra

Beta — feedback welcome: [email protected]