 LeoVasanko
|
4d4b290cc8
|
Revert earlier change to iframe srcdoc, using src instead, because srcdoc was not compatible with all passkey implementations (BitWarden).
|
2025-12-04 06:01:47 +00:00 |
|
|
LeoVasanko
|
a6591a1fbb
|
Better static files handling on backend, when in dev mode: fetch from vite.
|
2025-12-04 02:30:02 +00:00 |
|
|
LeoVasanko
|
b9b1c995f9
|
Update forward API to return in JSON iframe srcdoc with options injected. (currently broken in dev mode).
|
2025-12-04 01:58:18 +00:00 |
|
|
LeoVasanko
|
547a6cd923
|
Make auth/admin apps API calls use apiFetch, a new function that asks for permission by iframe if needed. Implement max-age checks for API authz.verify as well along with a custom exception type that carries metadata.
|
2025-12-03 23:17:02 +00:00 |
|
|
LeoVasanko
|
fd9a5afc1c
|
Implement metadata for RestrictedForward, set by /auth/api/forward endpoint when returning the app. Use this to implement support for time-based reauth requirement.
|
2025-12-02 23:39:31 +00:00 |
|
|
LeoVasanko
|
0af7aad28c
|
Add host-based authentication, UTC timestamps, session management, and secure cookies; fix styling issues; refactor to remove module; update database schema for sessions and reset tokens.
|
2025-10-04 06:31:54 +00:00 |
|
|
LeoVasanko
|
09b9894407
|
Cleaned up login/logout flows.
|
2025-09-03 07:08:16 +00:00 |
|
|
LeoVasanko
|
340888a178
|
Refactoring permissions checks.
|
2025-09-03 05:28:26 +00:00 |
|
|
LeoVasanko
|
0e4e4f4cfa
|
Make default permissions use only : as separator.
|
2025-08-31 06:43:49 +00:00 |
|
|
LeoVasanko
|
c06b7ddf26
|
Allow specifying multiple permissions.
|
2025-08-31 04:47:38 +00:00 |
|
|
LeoVasanko
|
c67a83abdc
|
Add permission check on forward-auth and validate.
|
2025-08-31 04:13:54 +00:00 |
|