Andrew Dryga

Questions: 1. Should we extend the session expiration on top of the lifetime of an OIDC ID token returned? Pros: - better usability, no need to log in every X...

The only thing left after #2696 is to make a recurrent job that will use IdP API to refresh the access token and extend `token.expires_at` every time that happens successfully.

I think the proper solution for this would be default UI filters. The reason why we keep the actors is audit logging and being able to restore them if IdP...

Dupe of #2014

> Since Resources are attached to Authorizations, they'll need to remain consistent for audit purposes. This is why we don't allow updating them. This kind of stuff will be extremely...

> DNS record update -- use case: My startup finally purchased our .com -- the Resource and its configuration should remain the same, but I need to update its address...

@jamilbk can we make it less ambiguous without forcing people to type it twice? I think for small setups most of names will be the same as address, especially for...

As a solution, I propose a few small changes: 1. We use `address` as a `placeholder` and default value of `name` (instead of setting it's `value` as user types); 2....

The issue is not that tabs don't work but that on each update the user is reset to the first tab. We had to write some ugly hacks to save...

You can try `master` branch, now this package is just a set of formatters.