Leo Vasanko
4c1db37c73
Better handling of Org Admin permission. More guardrails for Master Admin not locking himself out by changes. Admin app UI improvements.
2026-01-23 15:11:01 +00:00
Leo Vasanko
7a70c933c9
Various fixes and cleanup, regressions from prior commits.
2025-12-03 15:40:59 -06:00
Leo Vasanko
4306323c44
Consistently use apiJson for fetches, with timeout and proper error handling (less code duplication).
2025-12-03 13:00:24 -06:00
Leo Vasanko
1f75e0a305
Make auth/admin apps API calls use apiFetch, a new function that asks for permission by iframe if needed. Implement max-age checks for API authz.verify as well along with a custom exception type that carries metadata.
2025-12-03 11:17:02 -06:00
Leo Vasanko
a05d4aec81
Better error messages from backend, avoid bad toasts, cleanup of session validation.
2025-12-02 16:37:27 +00:00
Leo Vasanko
d1a7a53c19
Implemented auth app authentication in API mode (if loading the app itself wasn't blocked). Removed unnecessary toasts when entering restricted pages.
2025-12-02 15:25:31 +00:00
Leo Vasanko
29be642dbe
Better UX for profile view logout buttons.
2025-10-04 16:22:16 -06:00
Leo Vasanko
bfb11cc20f
A major refactoring for more consistent and stricter flows.
...
- Force using the dedicated authentication site configured via auth-host
- Stricter host validation
- Using the restricted app consistently for all access control (instead of the old loginview).
2025-10-04 15:55:43 -06:00
Leo Vasanko
389e05730b
Refactor user editing endpoints (only auth site) under api/user/ while leaving host-based endpoints at api root.
2025-10-04 08:59:51 -06:00
Leo Vasanko
591ea626bf
Add host-based authentication, UTC timestamps, session management, and secure cookies; fix styling issues; refactor to remove module; update database schema for sessions and reset tokens.
2025-10-03 18:31:54 -06:00
Leo Vasanko
5d8304bbd9
Refactor user-profile, restricted access and reset token registration as separate apps so the frontend does not need to guess which context it is running in.
...
Support user-navigable URLs at / as well as /auth/, allowing for a dedicated authentication site with pretty URLs.
2025-10-02 15:44:48 -06:00
Leo Vasanko
d5bc3e773d
Clear sessionStorage on logout.
2025-09-28 19:45:37 -06:00
Leo Vasanko
b0a1bb72dc
Cleaner logout.
2025-09-02 19:11:25 -06:00
Leo Vasanko
b324276173
Cleaned up login/logout flows.
2025-09-02 19:08:16 -06:00
Leo Vasanko
312d23b79a
Refactor API under /auth/api
2025-09-02 14:32:19 -06:00
Leo Vasanko
7036338b33
Use rp-name for frontend branding
2025-09-01 18:48:59 -06:00
Leo Vasanko
326a7664d3
Formatting
2025-08-30 18:43:27 -06:00
Leo Vasanko
3e5c0065d5
Remodel reset token handling due to browsers sometimes refusing to set the cookie when opening the link (from another site).
2025-08-30 15:54:17 -06:00
Leo Vasanko
407994548a
Almost complete org/permission handling. Much cleanup, bootstrap works.
2025-08-07 13:58:12 -06:00
Leo Vasanko
f96668b135
Cleaner error message on aborted Passkey operations.
2025-08-06 12:00:23 -06:00
Leo Vasanko
3c6c9b29f6
Frontend component selection logic simplified.
2025-08-06 11:33:34 -06:00
Leo Vasanko
9f423135ed
Refactor to not use status: success, but HTTP codes, and renamed the error key to detail to match FastAPI's own.
2025-08-06 10:09:55 -06:00
Leo Vasanko
cf138d90c5
Checkpoint, fixing reset token handling broken in earlier edits.
2025-08-06 09:55:14 -06:00
Leo Vasanko
30ab73d625
Everything works. Minor adjustments on frontend and backend for the new API.
2025-08-02 07:41:42 -06:00
Leo Vasanko
8882d0672b
Frontend adjusted for the new API.
2025-08-01 13:16:10 -06:00
Leo Vasanko
c5e5fe23e3
Major cleanup and refactoring of the backend (frontend not fully updated).
2025-08-01 12:32:27 -06:00
Leo Vasanko
225d7b7542
Refactoring reset and session tokens, currently broken.
2025-07-14 16:10:02 -06:00
Leo Vasanko
19bcddca30
Refactor to get user info from a single endpoint
2025-07-14 12:30:10 -06:00
Leo Vasanko
f9f263171b
Move the whole app under /auth/, fix static build.
2025-07-13 14:03:15 -06:00
Leo Vasanko
9711453553
Rewritten frontend with Vue
2025-07-13 12:41:08 -06:00
Leo Vasanko