develop
Auth: Document the URL token wiring in internal/auth/tokens #5733 #5743
Links: Use canonical trailing-slash form for website URLs
Auth: Improve "auth add" and "client add" CLI commands #808 #3943
Logs: Add package pkg/log/status to provide generic outcome constants
Pkg: Apply "golangci-lint" recommendations to authn & dsn packages #5330
API: Regenerate swagger.json
Vision: Allow use of configured service key for API authentication #5299
OIDC: Improve CLI commands and add AuthIssuer to users and sessions #782
Auth: Implement 2FA setup and login in the web user interface #808 #3943
Tests: Add unit tests #808 #3943
Auth: Support asymmetric JSON Web Tokens (JWT) and Key Sets (JWKS) #5230
Tests: Add unit tests
OIDC: Add "address" to the default userinfo request scopes #782
Account: Allow OIDC and LDAP users with password to use 2FA #782 #808
Auth: Revoke derived sessions & gate app passwords by login state #5647
Test: Use PascalCase names for all Go subtests in /pkg