 LeoVasanko
|
3a8e7d1f4f
|
Remove credentials: 'include', a mechanism that we don't actually use.
|
2026-01-27 15:23:19 +00:00 |
|
|
LeoVasanko
|
a8269df0b4
|
Cleaner up registration link creation. Don't show the dialog until when there is a valid link. Implement a global blur backdrop with nicer effect and proper scrollbar handling (avoiding layout shifting a bit). Use the global backdrop to ensure consistent visuals between authentication and the modal being shown, along with in/out transitions.
|
2025-12-09 23:58:04 +00:00 |
|
|
LeoVasanko
|
e102b8383b
|
Admin app simplification by using API auth properly. Implemented promise to keep request blocked by permission check while the user authenticates, fixing concurrent requests.
|
2025-12-04 09:19:40 +00:00 |
|
|
LeoVasanko
|
29df169a67
|
Make restricted app use simple fetch that doesn't do API authentication (recursively).
|
2025-12-04 06:20:14 +00:00 |
|
|
LeoVasanko
|
4d4b290cc8
|
Revert earlier change to iframe srcdoc, using src instead, because srcdoc was not compatible with all passkey implementations (BitWarden).
|
2025-12-04 06:01:47 +00:00 |
|
|
LeoVasanko
|
1782547b9e
|
Fix infinitely nested login iframes when the restricted app notices it needs login.
|
2025-12-04 03:56:17 +00:00 |
|
|
LeoVasanko
|
9976e05696
|
Various fixes and cleanup, regressions from prior commits.
|
2025-12-04 03:40:59 +00:00 |
|
|
LeoVasanko
|
b9b1c995f9
|
Update forward API to return in JSON iframe srcdoc with options injected. (currently broken in dev mode).
|
2025-12-04 01:58:18 +00:00 |
|
|
LeoVasanko
|
4482a601f3
|
Fix fetch timeout rolling while in authentication flow. Now each fetch gets a fresh timeout.
|
2025-12-04 01:35:44 +00:00 |
|
|
LeoVasanko
|
2ecf8433a1
|
Consistently use apiJson for fetches, with timeout and proper error handling (less code duplication).
|
2025-12-04 01:00:24 +00:00 |
|
|
LeoVasanko
|
db892365dc
|
Improved auth profile UX, consistent transparent-blur dialog background everywhere.
|
2025-12-04 00:29:42 +00:00 |
|
|
LeoVasanko
|
469d606ce5
|
Improved apiFetch and jsonFetch functions.
|
2025-12-03 23:26:38 +00:00 |
|
|
LeoVasanko
|
547a6cd923
|
Make auth/admin apps API calls use apiFetch, a new function that asks for permission by iframe if needed. Implement max-age checks for API authz.verify as well along with a custom exception type that carries metadata.
|
2025-12-03 23:17:02 +00:00 |
|