LeoVasanko
8c2809a879
Update fastapi-vue-setup, make use of its access logging facility.
2026-09-05 14:36:25 +00:00
LeoVasanko
3f51d06f13
Admin Server Options panel added for configuring rp-name, auth-host and origins.
2026-02-19 18:53:53 +00:00
LeoVasanko
39000ef831
Remove PASKIA_SITE_URL env, use PASKIA_VITE_URL instead, moving the correct site URL determination to paskia CLI directly. This resolves devserver issues where VITE URL was reported as the external site URL instead of configured auth-host or origins. Main CLI still simplified. Bump deps versions and cleanup pyproject.toml.
2026-02-18 17:21:03 +00:00
LeoVasanko
ef7a6c8011
Upgrade fastapi-vue-setup 1.0.2
2026-02-11 21:33:21 +00:00
LeoVasanko
6a217978d6
Upgrade fastapi-vue-setup.
2026-02-09 16:29:24 +00:00
LeoVasanko
615066a2a2
Upgrade by fastapi-vue-setup, devserver script entirely rewritten to use its facilities.
2026-02-05 18:50:08 +00:00
LeoVasanko
632278d4ce
Change CLI to use --listen rather than positional hostport argument. Fix listening on all interfaces (runs lifespan twice, which needs to be OK). Update README with various CLI changes and more.
2026-02-05 02:54:07 +00:00
LeoVasanko
5ee7443801
Use fastapi-vue-setup, merging its template scripts to old Paskia entry point and devserver. Simplified CLI, no longer uses serve subcommand. Fixed the URL displayed on banner to show to actual frontend/caddy server even in devmode.
2026-01-25 03:15:50 +00:00
LeoVasanko
0bfb035f76
Docs updates.
2025-12-19 18:34:12 +00:00
LeoVasanko
4a753ca29b
Vite devserver configuration that behaves correctly for auth-host, serving the profile view at site root and /admin/ instead of under /auth/.
2025-12-10 18:18:14 +00:00
LeoVasanko
a8ffd629ff
Fix devserver script misprocessing in some situations where auth-host was being used. Deduplicate origins on server end.
2025-12-10 17:39:09 +00:00
LeoVasanko
1bed2c39d8
Implement code word based remote authentication ( #1 )
...
Add comprehensive remote authentication system allowing users to log in from one device by authenticating from another trusted device. Features include:
- Proof of Work (PoW) protection using PBKDF2-SHA512 to prevent abuse
- Simple pairing codes (3 words) protected by dynamic PoW difficulty
- Autocomplete pairing code input with error checking
- Real-time WebSocket communication between devices
Unlike device addition links and reset links with QR codes that only allow adding an authentication method, and that work offline over the duration of several days, this mechanism is strictly online, with 5 minute time limit.
2025-12-08 23:56:48 +00:00
LeoVasanko