 Leo Vasanko
|
1728aa1466
|
Simpler migration, no support for dev versions.
|
2026-02-18 00:07:07 +00:00 |
|
|
Leo Vasanko
|
8d463e0118
|
Cleaner ed25519 key generation and storage in DB. Hide the value in DB logging and cleanup to remove non-color-support.
|
2026-02-17 23:39:08 +00:00 |
|
|
Leo Vasanko
|
3e364e0b6f
|
Fix all remaining problems, pytest passing.
|
2026-02-17 22:50:12 +00:00 |
|
|
Leo Vasanko
|
04e7119ac8
|
Fix earlier merges done from main which were incomplete.
|
2026-02-17 21:48:21 +00:00 |
|
|
Leo Vasanko
|
9b23e7afbb
|
The pytest failures have been successfully resolved by fixing the API response structures, updating the test assertions to match the new nested response formats, and ensuring the database structs serialize correctly without breaking existing functionality.
|
2026-02-17 20:26:30 +00:00 |
|
|
Leo Vasanko
|
a52f1c318b
|
ruff check
|
2026-02-17 20:19:52 +00:00 |
|
|
Leo Vasanko
|
aae4117a38
|
API cleanup: msgspec structs for all JSON responses, aaguid icon normalization, User kw_only, migration v4.
|
2026-02-17 20:16:55 +00:00 |
|
|
Leo Vasanko
|
69c456b0b3
|
Move __main__.py to paskia package, use samesite=strict for cookies.
|
2026-02-17 19:41:09 +00:00 |
|
|
Leo Vasanko
|
1800e4f295
|
Show credential UUID in logging as they are, no prettifying.
|
2026-02-17 18:33:25 +00:00 |
|
|
Leo Vasanko
|
7a09dbc040
|
Simplified user info update APIs, DB and frontend to remove separate update functions for each property. Automatically choose preferred username for users as they register, based on display name.
|
2026-02-17 18:16:32 +00:00 |
|
|
Leo Vasanko
|
8128d40202
|
New user basic info card and improved layout, telephone number and other contact details shown.
|
2026-02-17 17:33:06 +00:00 |
|
|
Leo Vasanko
|
7c75947662
|
Admin OIDC cleanup.
|
2026-02-17 13:36:46 +00:00 |
|
|
Leo Vasanko
|
d526b2a98d
|
Group OIDC sessions correctly in profile view.
|
2026-02-17 12:27:57 +00:00 |
|
|
Leo Vasanko
|
7523a49543
|
Add preferred username and email to user data.
|
2026-02-17 12:07:25 +00:00 |
|
|
Leo Vasanko
|
627912fae5
|
Fix tests for earlier changes.
|
2026-02-17 01:35:11 +00:00 |
|
|
Leo Vasanko
|
f8c213c7dc
|
Implement backchannel logout to client.
|
2026-02-17 01:31:45 +00:00 |
|
|
Leo Vasanko
|
b5e308d5df
|
OIDC authentication works, remove debug.
|
2026-02-17 01:09:16 +00:00 |
|
|
Leo Vasanko
|
ba3695cf88
|
Aud problem debug.
|
2026-02-17 00:20:53 +00:00 |
|
|
Leo Vasanko
|
2e8439f876
|
Issuer problem debug.
|
2026-02-17 00:19:04 +00:00 |
|
|
Leo Vasanko
|
d0abd224f4
|
Issuer problem debug.
|
2026-02-17 00:17:47 +00:00 |
|
|
Leo Vasanko
|
5bc92ce983
|
Issuer problem debug.
|
2026-02-17 00:16:10 +00:00 |
|
|
Leo Vasanko
|
5019cd13fe
|
Fix again, didn't work
|
2026-02-17 00:07:26 +00:00 |
|
|
Leo Vasanko
|
72307fb7c3
|
Fix again, didn't work
|
2026-02-17 00:05:22 +00:00 |
|
|
Leo Vasanko
|
21d1e123f5
|
Fix FastAPI token grant_type validation error when missing and form was sent by client.
|
2026-02-17 00:00:51 +00:00 |
|
|
Leo Vasanko
|
fee833b908
|
Made PKCE and nonce optional, only when client wants them.
|
2026-02-16 23:55:42 +00:00 |
|
|
Leo Vasanko
|
bcecb390e1
|
Fix registration broken from earlier hardening. Streamline authentication and registration to avoid duplication of this.
|
2026-02-16 21:26:24 +00:00 |
|
|
Leo Vasanko
|
2a318adab4
|
Add back missing ResetToken.delete() lost on earlier refactoring.
|
2026-02-16 20:53:07 +00:00 |
|
|
Leo Vasanko
|
30aeb9a310
|
Admin OIDC Client editing moved to its own page.
|
2026-02-16 20:32:55 +00:00 |
|
|
Leo Vasanko
|
09049d3094
|
Implement redirect URL autodiscovery (Trust On First Use - if none are manually defined).
|
2026-02-16 20:32:11 +00:00 |
|
|
Leo Vasanko
|
e7e0097fba
|
User friendly admin app OIDC Client dialog. Permissions domain scoping to OIDC Clients.
|
2026-02-16 17:43:52 +00:00 |
|
|
Leo Vasanko
|
b73b2d6fe9
|
Renamed OIDC permissions claim to more commonly used groups. Move jwtk to a more convenient location. Draft admin app OIDC client configuratioon.
|
2026-02-16 16:54:53 +00:00 |
|
|
Leo Vasanko
|
eece6d4a21
|
Remove some confusion between exchange and set-session endpoints, all using set-session now with a bearer code. Using codes in remote auth as well. Full separation of cookie and OIDC codes.
|
2026-02-16 14:26:20 +00:00 |
|
|
Leo Vasanko
|
d653a1db35
|
Database migration to add OIDC and convert to hardened sessions.
|
2026-02-15 21:12:29 +00:00 |
|
|
Leo Vasanko
|
feeea30cb6
|
Hardening OIDC verification.
|
2026-02-15 20:49:13 +00:00 |
|
|
Leo Vasanko
|
e59852b44c
|
Session keys hardened (namespaced hashes of tokens). Various cleanup.
|
2026-02-15 20:14:48 +00:00 |
|
|
Leo Vasanko
|
18722f0e01
|
Implement stateful OIDC as Session objects. Add refresh tokens and backchannel logout.
|
2026-02-15 03:48:10 +00:00 |
|
|
Leo Vasanko
|
8132189a04
|
Rename /auth/restricted/ to auth/restricted/{iframe,oidc} for clarity and separation.
|
2026-02-15 03:05:11 +00:00 |
|
|
Leo Vasanko
|
701b0810bd
|
Stricter security. Moved to /auth/oidc/
|
2026-02-15 02:57:23 +00:00 |
|
|
Leo Vasanko
|
b5a5f2707a
|
Draft OpenID Connect support.
|
2026-02-14 23:01:13 +00:00 |
|
|
Leo Vasanko
|
f195818f07
|
Upgrade fastapi-vue-setup 1.0.2
|
2026-02-11 21:33:21 +00:00 |
|
|
Leo Vasanko
|
e16c027b53
|
Remove unused CLI bootstrap entry point.
|
2026-02-11 20:29:12 +00:00 |
|
|
Leo Vasanko
|
a9cf518296
|
Add version indication and link to our site on profile page (bottom right corner).
|
2026-02-11 01:36:58 +00:00 |
|
|
Leo Vasanko
|
b1731e5abf
|
Inline get_config, rewrite update_config, DB init Config and rp_id defaults changed.
|
2026-02-10 23:17:28 +00:00 |
|
|
Leo Vasanko
|
9332eb63ab
|
ResetToken.hash(phrase) added avoiding code duplication.
|
2026-02-10 22:56:49 +00:00 |
|
|
Leo Vasanko
|
310a4e9a87
|
Remove remaining DB getter functions, inline at call site and add ResetToken.by_passphrase().
|
2026-02-10 22:48:31 +00:00 |
|
|
Leo Vasanko
|
6961a82f3f
|
Remove unnecessary odd getter from db.operations.
|
2026-02-10 22:37:57 +00:00 |
|
|
Leo Vasanko
|
f7d9d03765
|
Refactor DB lifecycle functions init and cleanup to separate db.lifecycle module.
|
2026-02-10 22:28:38 +00:00 |
|
|
Leo Vasanko
|
2f2934db6b
|
CRUD store and delete on the DB classes directly.
|
2026-02-10 22:19:02 +00:00 |
|
|
Leo Vasanko
|
f0d360758c
|
Db operations: bootstrap separated to its own module.
|
2026-02-10 22:09:07 +00:00 |
|
|
Leo Vasanko
|
12715ee405
|
Use strictly same now timestamp over a transaction, even for UUIDv7s generated.
|
2026-02-10 21:45:09 +00:00 |
|