Search results

bug: Null byte (\x00) in POST body to /oidc/token causes HTTP 500 instead of 400

bugSomething isn't workingSomething isn't working

Status: Open.

#8990 In logto-io/logto;

· Allen-wick opened on Jun 10, 2026

bug/regression: Editing admin profile in OSS gives 401

bugSomething isn't workingSomething isn't working

Status: Open.

#8981 In logto-io/logto;

· nabeelio opened on Jun 10, 2026

bug: Tenant-to-host escape risk via vm.runInNewContext in custom JWT scripts

pending-verificationSomething is still under investigationSomething is still under investigation

Status: Open.

#8977 In logto-io/logto;

· Allen-wick opened on Jun 9, 2026

bug:auth flows like sign in, sign out and account center Flash bang the user (Theme Flash)

bugSomething isn't workingSomething isn't working

Status: Open.

#8959 In logto-io/logto;

· Heracraft opened on Jun 5, 2026

feature request: Customise verification code duration

featureCool stuffCool stuff

Status: Open.

#8913 In logto-io/logto;

· joemewes opened on May 29, 2026

feature request: Expose organization_id (and per-org context) to JWT customizer for organization tokens

feature-requestSomething cool or not coolSomething cool or not cool

Status: Open.

#8844 In logto-io/logto;

· bravik opened on May 21, 2026

feature request: Fine-grained access control for Management APIs

feature-requestSomething cool or not coolSomething cool or not cool

status/plannedWe decided to do it.We decided to do it.

Status: Open.

#8821 In logto-io/logto;

· joemewes opened on May 15, 2026

feature request: Clarify SPA refresh token TTL behavior on rotation (revisit #4520)

feature-requestSomething cool or not coolSomething cool or not cool

status/plannedWe decided to do it.We decided to do it.

Status: Open.

#8779 In logto-io/logto;

· SongRongLee opened on May 9, 2026

feature request: Allow setting both plaintext & HTML content for e-mail templates

feature-requestSomething cool or not coolSomething cool or not cool

status/plannedWe decided to do it.We decided to do it.

Status: Open.

#8750 In logto-io/logto;

· mpiosik opened on May 2, 2026

feature request: Allow dot (.) and hyphen (-) in username when using Docker image ghcr.io/logto-io/logto:latest

enhancementMake it betterMake it better

status/plannedWe decided to do it.We decided to do it.

Status: Open.

#8727 In logto-io/logto;

· anatoliy-v-oleynik opened on Apr 27, 2026

feature request: Roles per application instead of global roles

feature-requestSomething cool or not coolSomething cool or not cool

status/plannedWe decided to do it.We decided to do it.

Status: Open.

#8726 In logto-io/logto;

· nunonux opened on Apr 27, 2026

feature request: MCPJam inspector compatibility

bugSomething isn't workingSomething isn't working

pending-verificationSomething is still under investigationSomething is still under investigation

Status: Open.

#8712 In logto-io/logto;

· tleyden opened on Apr 25, 2026