Pedro CastroandGitHub 9ae2381755 fix(auth): validate IdP authority before SAML account linking (#26005) ...

* fix(auth): validate IdP authority before SAML account linking

Adds verification that SAML IdP is authoritative for the email domain
before allowing account conversion

* fix(auth): deny by default on missing SAML tenant + optimize membership query

 - Block account conversion when tenant is missing (deny by default)
 - Replace JOIN + ILIKE with two indexed lookups for O(1) performance

* refactor(auth): apply data minimization to security logs

2025-12-20 17:45:18 +00:00

..

app

fix(auth): validate IdP authority before SAML account linking (#26005)

2025-12-20 17:45:18 +00:00

components

fix: cache build error on CI (#25958)

2025-12-20 15:24:56 +00:00

docs

Fix SAML login (#4037)

2022-08-30 12:25:24 -06:00

fonts

Revert "Inter 4.0 (#12766)" (#12839)

2023-12-17 08:21:22 +10:00

lib

feat: add webhook versioning (#23861)

2025-12-18 09:36:22 +02:00

modules

fix: Handle error when no default calendar exists for a o365 account (#26074)

2025-12-20 06:33:46 +00:00

pages

fix: render markdown in custom page redirect messages (#25987)

2025-12-19 16:44:06 +05:30

playwright

fix: E2E flakes after splitting the tests (#26059)

2025-12-20 13:04:21 -03:00

public

fix(auth): validate IdP authority before SAML account linking (#26005)

2025-12-20 17:45:18 +00:00

scripts

perf: og image caching v2 (#23189)

2025-10-29 10:36:17 -03:00

server/lib

refactor: Migrate repositories/services from /lib to /features (#25925)

2025-12-17 14:14:50 +00:00

styles

feat: add coss-ui core package (#25984)

2025-12-18 19:57:21 +00:00

test

feat: dist tracing 4 (#25574)

2025-12-15 10:43:22 +00:00

test-results

fix: people filter in /bookings and create OOO modal (#17396)

2024-10-31 14:57:07 +00:00

.dockerignore

feat: Add official docker support (#24672)

2025-10-29 15:31:02 +00:00

.gitignore

fix: sentry builds (#20310)

2025-05-09 19:44:48 +00:00

.prettierignore

chore: Enable prettier on vitest files without causing test failures (#11190)

2023-09-14 08:58:08 +02:00

calendso.yaml

fix: Removes send an invite email option & always send email (#12229)

2023-11-06 13:30:37 +05:30

CHANGELOG.md

Adding already released embed version (#21033)

2025-05-06 15:19:47 +00:00

components.json

feat: add coss-ui core package (#25984)

2025-12-18 19:57:21 +00:00

cron-tester.ts

refactor: Remove all code related to the old cache system (#25284)

2025-11-20 18:02:18 +02:00

eslint.config.mjs

chore: upgrade eslint 9 (#24002)

2025-09-24 22:20:49 +09:00

getNextjsOrgRewriteConfig.js

fix: typos in apps/web (#19194)

2025-02-10 03:35:17 +00:00

instrumentation-client.ts

fix: enhance bot ID initialization check in instrumentation client (#24961)

2025-11-06 12:00:31 +00:00

instrumentation.ts

chore: Upgrade prisma to 6.7.0 (#21264)

2025-09-11 15:27:50 +01:00

middleware.test.ts

chore: Remove next-collect package (#25146)

2025-11-19 13:54:26 +00:00

middleware.ts

chore: Remove next-collect package (#25146)

2025-11-19 13:54:26 +00:00

next-i18next.config.js

Migrates all tRPC code to a monorepo package (#3484)

2022-07-22 11:27:06 -06:00

next.config.js

feat: add coss-ui core package (#25984)

2025-12-18 19:57:21 +00:00

package.json

chore: release v6.0.3

2025-12-20 01:00:01 +00:00

pagesAndRewritePaths.js

feat(companion): open cal.com/app on new tab and fix extension/mobile UX issues (#25962)

2025-12-17 17:14:37 +05:30

postcss.config.mjs

feat: upgrade tailwind v4 (#24598)

2025-11-25 17:32:28 -03:00

project.toml

Migrated cal.com to apps/web

2022-02-10 14:22:45 -07:00

sentry.edge.config.ts

chore: Lower number of errors sent to Sentry (#21300)

2025-05-14 12:21:13 +00:00

sentry.server.config.ts

chore: Lower number of errors sent to Sentry (#21300)

2025-05-14 12:21:13 +00:00

tsconfig.json

feat: add coss-ui core package (#25984)

2025-12-18 19:57:21 +00:00

vercel.json

refactor: Remove all code related to the old cache system (#25284)

2025-11-20 18:02:18 +02:00