Quentin Gliech ce68d63adb admin-api: allow filtering OAuth2 sessions by multiple clients ...

Make `filter[client]` on `GET /api/admin/v1/oauth2-sessions` repeatable
so admin tooling can fetch sessions belonging to a set of clients in
one request. The field on `FilterParams` changes from `Option<Ulid>`
to `Vec<Ulid>`; the struct was already extracted with
`axum_extra::extract::Query` so the repeated values are not silently
dropped.

Each client ULID is validated to exist (mirroring the previous
single-client `404` behaviour) before being passed to the new
`OAuth2SessionFilter::for_clients` storage filter. The `Display`
impl used to reconstruct cursor links now emits one
`filter[client]=…` segment per client so pagination preserves the
filter. The OpenAPI schema is regenerated via `misc/update.sh` and
now describes the parameter as an array.

2026-06-01 17:30:14 +02:00

..

index.html

Load Swagger UI earlier

2025-02-11 19:16:59 +01:00

oauth2-redirect.html

Host a Swagger UI both in the static documentation and by the server

2024-08-01 15:17:14 +02:00

spec.json

admin-api: allow filtering OAuth2 sessions by multiple clients

2026-06-01 17:30:14 +02:00