simeng-li

fix(core): skip iss validation for azure oidc sso

1

## Summary Skip the issuer validation for Azure OIDC SSO connector. For multi-tenant audience connectors, the issuer value in idToken may vary depending on the authenticated user's tenantId. Thus, unable...

refactor(experience): experience api migration

1

## Summary This PR combines all the experience API migration PRs into one. Includes the full migration code changes. Migrate our existing experience app using the latest experience API from...

## Summary Add new `Experience API` and `Management API` openapi docs link. Keep the top-level nav bar's API link pointing to `openapi.logto.io`, which uses the original `swagger.json` as the data...

## Summary Add SSO direct sign-in landing page to the react-sample project. ## Testing ## Checklist - [ ] `.changeset` - [ ] unit tests - [ ] integration tests...

refactor(core): update idp-initiated auth config management api

1

## Summary Related PR #6675. ### Option A (default) Redirect the user to the client side to initiate an OIDC authorization request. With the following configs: - `defaultApplicationId`: Can be...

feat(schemas): add idp-initiated SSO client side callback url columns

1

## Summary Alternate the `sso_connector_idp_initiated_auth_configs` to support directly redirecting the user to the client app to initiate a standard OIDC authorization request. ### Context For better security and to support...

fix(schemas): add user tenantId foreign key constraint

2

## Summary We have identified a bug where developers can insert cross-tenant users into an organization using the `POST /organizations/:id?users` API. Previously, there was no constraint to ensure that a...