All pull requests

Pull requests

• LG-18077 Remove doc_auth_vendor writes and attribute from Idv::Session

  #13770·Mawar2 opened Oct 29, 2026Contributor·1 task done·

  ·
  

• LG-17958 Add attempts API events to IdV PA flow

  #13769·shanechesnutt-ft opened Oct 29, 2026Contributor·

  ·
  13

• Release document images inside the encrypted userinfo response and remove the download endpoint

  #13767·Kneuman0 opened Oct 29, 2026Contributor·

  ·
  1

• Share one JweEncryptor across every JWE Login.gov produces

  #13766·Kneuman0 opened Oct 29, 2026Contributor·

  ·

• Keep personal key wraps safe for mail verification, KMS errors and races

  #13764·Dexin-Huang opened Oct 29, 2026·4 tasks done·

  ·

• Discard site key recovery codes another session has replaced

  #13763·Dexin-Huang opened Oct 29, 2026·4 tasks done·

  ·

• Log a failed site key release after the password retry

  #13762·Dexin-Huang opened Oct 29, 2026·2 tasks done·

  ·

• Keep existing site key roots when site keys are turned off

  #13761·Dexin-Huang opened Oct 29, 2026·3 tasks done·

  ·

• Reproof eligible service provider if document artifacts have expired

  #13760·vrajmohan opened Oct 28, 2026Contributor·

  ·

• LG-17778: Post-release: mDL clean up

  status - blockedstatus - do not merge
  #13757·antcampbelll opened Oct 28, 2026Contributor·5 tasks·

  ·
  

• Rely on a listed client's access token at userinfo only under the DPoP scheme with a proof

  #13748·Kneuman0 opened Oct 27, 2026Contributor·

  ·

• Require the actor's DPoP proof at the token exchange and bind the delegated token with cnf.jkt

  #13739·Kneuman0 opened Oct 26, 2026Contributor·

  ·

• Bind the authorization code and the subject token to a listed client's DPoP key

  #13738·Kneuman0 opened Oct 26, 2026Contributor·

  ·
  8

• Add the DPoP proof verifier and the per-client key-binding setting

  #13737·Kneuman0 opened Oct 26, 2026Contributor·

  ·
  25

• Remove unnecessary and redundant RISC API events

  #13736·monfresh opened Oct 26, 2026Contributor·

  ·

• Bump phonelib from 0.10.15 to 0.10.28

  dependenciesruby
  #13733·dependabot[bot] opened Oct 23, 2026Bot·

  ·
  1

• Add failing-then-passing IALMAX SP Return Log scenarios [skip changelog]

  #13700·danielmage-dev opened Oct 15, 2026Contributor·

  ·

• Bump libphonenumber-js from 1.13.14 to 1.13.15

  dependenciesjavascript
  #13655·dependabot[bot] opened Oct 13, 2026Bot·

  ·

• Let identity-verified users recover per-site keys with their personal key

  #13622·taigrr opened Oct 6, 2026Member·6/6·2 tasks·

  ·

• Let users recover per-site keys after a password reset

  #13621·taigrr opened Oct 6, 2026Member·5/6·4 tasks·

  ·

• Release sealed per-site keys on OIDC authorization

  #13620·taigrr opened Oct 6, 2026Member·4/6·3 tasks·

  ·

• Store per-site key roots wrapped under the user's password

  #13619·taigrr opened Oct 6, 2026Member·3/6·3 tasks·

  ·

• Add sealing primitives for per-site keys

  #13618·taigrr opened Oct 6, 2026Member·2/6·1 task·

  ·

• changelog: Internal, Telephony, Include destination country code in d…

  #13615·danielmage-dev opened Oct 2, 2026Contributor·

  ·

• DRAFT: edit create-deploy-pr script

  #13593·jmdembe opened Sep 24, 2026Contributor·

  ·