conduit v1.0 progress tracker

[avdb13]

Single Sign-On:

• native OIDC support
• UIA bypass on /keys/upload to allow adding a master key if none is present
• automatic registration, profile is created from userinfo claims if supported
• interactive registration (part 2)
• OAuth support (GitHub) (part 2)
• Migrate existing accounts while providing their password as a fallback
• UIA through fallback acknowledgement
• RP-initiated backchannel logout
• ClientSecretJwt/PrivateKeyJwt client credentials (required for Apple)
• Pushed authorization requests
• Device authorization flow for QR code login

Third-party Identifiers

• configurable email verification requirement on registration
• adding emails to existing accounts
• changing a password can nos be authenticated through email verification

Rate-limiting:

• implementation of a concurrent, lock-free API storing one u64 per client
• identification of non-authenticated clients through their IP address
• flexible configuration allowing restricting any endpoint
• permanent service denial for clients disregarding the cooldown interval

Join-by-default Rooms:

• draft

Refresh Tokens:

• draft

Knocking Support:

• draft

Server-level Moderation Policies:

• draft

Administration API:

• draft