| Name | Modified | Size | Downloads / Week |
|---|---|---|---|
| Parent folder | |||
| checksums.txt | 2026-08-07 | 1.1 kB | |
| pocket-id_linux_armv7 | 2026-08-07 | 69.7 MB | |
| pocket-id_openbsd_amd64 | 2026-08-07 | 73.6 MB | |
| pocket-id_freebsd_amd64 | 2026-08-07 | 73.8 MB | |
| pocket-id_linux_arm64 | 2026-08-07 | 69.0 MB | |
| pocket-id_darwin_amd64 | 2026-08-07 | 76.2 MB | |
| pocket-id_linux_amd64 | 2026-08-07 | 73.9 MB | |
| pocket-id_openbsd_arm64 | 2026-08-07 | 68.7 MB | |
| pocket-id_windows_amd64.exe | 2026-08-07 | 75.1 MB | |
| pocket-id_darwin_arm64 | 2026-08-07 | 71.7 MB | |
| pocket-id_freebsd_arm64 | 2026-08-07 | 68.8 MB | |
| pocket-id_linux_386 | 2026-08-07 | 69.8 MB | |
| pocket-id_windows_arm64.exe | 2026-08-07 | 69.3 MB | |
| README.md | 2026-08-07 | 5.1 kB | |
| v2.13.0 source code.tar.gz | 2026-08-07 | 2.1 MB | |
| v2.13.0 source code.zip | 2026-08-07 | 2.6 MB | |
| Totals: 16 Items | 864.3 MB | 0 | |
Bug Fixes
- retry qr code login polling for known transient gateway responses (7039692 by @stonith404)
- decrease QR code login session duration to 5 minutes (e35be30 by @stonith404)
- show more user-friendly error message if QR code has expired (27199f6 by @stonith404)
- one-time-access-token CLI fails with "RuntimePSKs is required" (#1637 by @salcatroppa)
- session revoke fails if orphaned session tokens exist (598895e by @stonith404)
- disable api key auth for webauthn register endpoints (db64b15 by @stonith404)
- explicitly set SameSite to Lax for cookies (69d55ad by @stonith404)
- explicitly require JSON for request bodies (1238bf0 by @stonith404)
- don't rely on content length header for optional json binding (2c7d1b6 by @stonith404)
- respect log level in HTTP request logs (488c50e by @stonith404)
- don't skip rate limits for loopback addresses (140b5d3 by @stonith404)
- make OIDC client token lifetimes optional (#1650 by @ItalyPaleAle)
- in non-HA mode, increase AlarmLeaseDuration (#1660 by @ItalyPaleAle)
- separate TLS inputs and preserve certificate reloads (#1653 by @stonith404)
- brotli compression ignored (#1661 by @stonith404)
- align last signed in text left (c87012a by @stonith404)
Features
- make oauth access tokens RFC 9068 compliant (7c55bdf by @stonith404)
- implement OAuth Client ID Metadata Document (#1526 by @jfroy)
- add ability to customize session duration of clients (#1641 by @stonith404)
- add observability to actors (#1646 by @ItalyPaleAle)
- include Francis data in Pocket ID backups (#1645 by @ItalyPaleAle)
- add settings for limiting what passkeys can be used (#1662 by @stonith404)
Other
- preserve tab indentation for package.json in release script (a1ebf4e by @stonith404)
- Bump the "all-dependencies" group with 3 updates across multiple ecosystems (#1639 by @dependabot[bot])
- use paraglide markup instead of custom implementation (b08ac7b by @stonith404)
- fix wrong database version in
database.json(281bea5 by @stonith404) - standardize API error handling (#1635 by @stonith404)
- add deepsec to gitignore (e3e0ddc by @stonith404)
- upgrade vulnerable dependencies (9320144 by @stonith404)
- remove unused curl dependency from Dockerfile (98160b2 by @stonith404)
- remove invalid unit test (95809dd by @stonith404)
- use smaller francis.bin (4fe6f06 by @stonith404)
- move GeoLite to its own package (#1647 by @ItalyPaleAle)
- fix formatting (#1666 by @Copilot)
Full Changelog: https://github.com/pocket-id/pocket-id/compare/v2.12.0...v2.13.0
