 Leo Vasanko
|
afbd9606db
|
Revert earlier change to iframe srcdoc, using src instead, because srcdoc was not compatible with all passkey implementations (BitWarden).
|
2025-12-03 18:01:47 -06:00 |
|
|
Leo Vasanko
|
7a70c933c9
|
Various fixes and cleanup, regressions from prior commits.
|
2025-12-03 15:40:59 -06:00 |
|
|
Leo Vasanko
|
ad63d3fb3a
|
Better static files handling on backend, when in dev mode: fetch from vite.
|
2025-12-03 14:30:02 -06:00 |
|
|
Leo Vasanko
|
9488f69e53
|
Update forward API to return in JSON iframe srcdoc with options injected. (currently broken in dev mode).
|
2025-12-03 13:58:18 -06:00 |
|
|
Leo Vasanko
|
ceb99de738
|
Improved auth profile UX, consistent transparent-blur dialog background everywhere.
|
2025-12-03 12:30:23 -06:00 |
|
|
Leo Vasanko
|
1f75e0a305
|
Make auth/admin apps API calls use apiFetch, a new function that asks for permission by iframe if needed. Implement max-age checks for API authz.verify as well along with a custom exception type that carries metadata.
|
2025-12-03 11:17:02 -06:00 |
|
|
Leo Vasanko
|
a05d4aec81
|
Better error messages from backend, avoid bad toasts, cleanup of session validation.
|
2025-12-02 16:37:27 +00:00 |
|
|
Leo Vasanko
|
07525b47ae
|
Centralise all cookie handling to session.py.
|
2025-10-04 18:48:24 -06:00 |
|
|
Leo Vasanko
|
45f9870d0d
|
WebSockets must use origin for finding the host calling them.
|
2025-10-04 17:16:51 -06:00 |
|
|
Leo Vasanko
|
591ea626bf
|
Add host-based authentication, UTC timestamps, session management, and secure cookies; fix styling issues; refactor to remove module; update database schema for sessions and reset tokens.
|
2025-10-03 18:31:54 -06:00 |
|
|
Leo Vasanko
|
37eaffff3f
|
Renaming of users in registration, profile and admin app.
|
2025-09-01 18:13:01 -06:00 |
|
|
Leo Vasanko
|
3e5c0065d5
|
Remodel reset token handling due to browsers sometimes refusing to set the cookie when opening the link (from another site).
|
2025-08-30 15:54:17 -06:00 |
|
|
Leo Vasanko
|
4f094a7016
|
Fixing cascade.
|
2025-08-30 14:07:32 -06:00 |
|
|
Leo Vasanko
|
407994548a
|
Almost complete org/permission handling. Much cleanup, bootstrap works.
|
2025-08-07 13:58:12 -06:00 |
|
|
Leo Vasanko
|
dcca3e3fbd
|
Globals restructured to their own module. Origin and RP definition.
|
2025-08-06 13:23:35 -06:00 |
|
|
Leo Vasanko
|
ba5f2d8bd9
|
Error handling cleanup for WS too.
|
2025-08-06 10:53:13 -06:00 |
|
|
Leo Vasanko
|
42545c07d2
|
Add New Passkey and Add New Device flows fixed.
|
2025-08-06 10:14:04 -06:00 |
|
|
Leo Vasanko
|
9f423135ed
|
Refactor to not use status: success, but HTTP codes, and renamed the error key to detail to match FastAPI's own.
|
2025-08-06 10:09:55 -06:00 |
|
|
Leo Vasanko
|
cf138d90c5
|
Checkpoint, fixing reset token handling broken in earlier edits.
|
2025-08-06 09:55:14 -06:00 |
|
|
Leo Vasanko
|
7f8f77ae1e
|
Separated session management from its FastAPI-dependent parts, creating authsession.py on main level.
Startup/main/scripts cleanup, now runs with passkey-auth command that takes CLI arguments.
|
2025-08-05 09:02:49 -06:00 |
|
|
Leo Vasanko
|
b58b7d5350
|
Finish DB cleanup/refactoring. Working now.
|
2025-08-05 08:26:35 -06:00 |
|
|
Leo Vasanko
|
c5733eefd6
|
Database cleanup, base class, separated from FastAPI app.
|
2025-08-05 07:55:31 -06:00 |
|
|
Leo Vasanko
|
30ab73d625
|
Everything works. Minor adjustments on frontend and backend for the new API.
|
2025-08-02 07:41:42 -06:00 |
|
|
Leo Vasanko
|
a987f47988
|
Fixes to backend API changes. The whole app is mostly functional.
|
2025-08-01 13:48:38 -06:00 |
|
|
Leo Vasanko
|
c5e5fe23e3
|
Major cleanup and refactoring of the backend (frontend not fully updated).
|
2025-08-01 12:32:27 -06:00 |
|
|
Leo Vasanko
|
0cfa622bf1
|
Removal of JWT code, cleanup, using User dataclass rather than UserModel in APIs.
|
2025-07-27 23:44:26 -06:00 |
|
|
Leo Vasanko
|
208419c2b1
|
Late night hacking...?
|
2025-07-14 17:45:01 -06:00 |
|