pam-oauth2-device (0.1.0-3) unstable; urgency=medium

  * Accept a username claim that equals the local account name, and create
    that account when it is missing, so any org member can sign in on a
    shared machine (BASED-1149). The users map still maps the joining
    person onto their own account. useradd is called only for a missing
    normal account and is given no password; an existing password is not
    read or changed. System accounts below UID_MIN are refused on this
    path.

 -- Clay Risser <clayrisser@gmail.com>  Mon, 28 Sep 2026 06:35:10 +0100

pam-oauth2-device (0.1.0-2) unstable; urgency=medium

  * Rebuild for Ubuntu 26.04 (resolute). The xUbuntu_26.04 repository
    was added to home:clayrisser:unstable after this package's last
    upload (BASED-272), and OBS only builds a source the pipeline
    commits, so this revision exists to publish into based-u26dev. No
    packaging change.

 -- Clay Risser <clayrisser@gmail.com>  Sun, 13 Sep 2026 07:13:34 +0000

pam-oauth2-device (0.1.0-1) unstable; urgency=medium

  * Initial packaging for the Based apt channel, from upstream's
    packaging/deb/debian (BASED-174: Keycloak device-flow login at the GDM
    greeter). v0.1.0 is upstream's only tagged release.
  * debian/control: source pam-oauth2-device, binary libpam-oauth2-device
    (Debian's libpam-<module> naming; upstream called it pamoauth2device);
    Section admin; debhelper-compat 13; libldap-dev instead of the
    transitional libldap2-dev; drop the curl and ldap-utils runtime
    dependencies, the module links libcurl and libldap and execs neither.
  * debian/rules: install the module into /usr/lib/<multiarch>/security,
    where Debian's libpam looks, instead of /lib/security; pass the
    dpkg-buildflags hardening flags on the make command line, since the
    upstream Makefile assigns CXXFLAGS and LDLIBS outright; ship
    config_template.json as an example instead of a mode-600 conffile.
  * debian/copyright: cover the vendored Nayuki QR and nlohmann json copies.
    debian/watch on upstream's GitHub tags. debian/gbp.conf and
    debian/gitlab-ci.yml on the shared basedlinux.com/packages pipeline.

 -- Clay Risser <clayrisser@gmail.com>  Fri, 11 Sep 2026 04:13:21 +0100
