 Leo Vasanko
|
8c88e6e37c
|
Vite dev proxy ./well-known/openid-configuration
|
2026-02-17 13:34:30 +00:00 |
|
|
Leo Vasanko
|
d526b2a98d
|
Group OIDC sessions correctly in profile view.
|
2026-02-17 12:27:57 +00:00 |
|
|
Leo Vasanko
|
7523a49543
|
Add preferred username and email to user data.
|
2026-02-17 12:07:25 +00:00 |
|
|
Leo Vasanko
|
ce68af5be3
|
Correct OIDC mode handling in restricted app.
|
2026-02-16 23:38:23 +00:00 |
|
|
Leo Vasanko
|
30aeb9a310
|
Admin OIDC Client editing moved to its own page.
|
2026-02-16 20:32:55 +00:00 |
|
|
Leo Vasanko
|
e7e0097fba
|
User friendly admin app OIDC Client dialog. Permissions domain scoping to OIDC Clients.
|
2026-02-16 17:43:52 +00:00 |
|
|
Leo Vasanko
|
b73b2d6fe9
|
Renamed OIDC permissions claim to more commonly used groups. Move jwtk to a more convenient location. Draft admin app OIDC client configuratioon.
|
2026-02-16 16:54:53 +00:00 |
|
|
Leo Vasanko
|
eece6d4a21
|
Remove some confusion between exchange and set-session endpoints, all using set-session now with a bearer code. Using codes in remote auth as well. Full separation of cookie and OIDC codes.
|
2026-02-16 14:26:20 +00:00 |
|
|
Leo Vasanko
|
ebf5f6db2c
|
Route our new restricted endpoints correctly on vite dev.
|
2026-02-16 14:23:07 +00:00 |
|
|
Leo Vasanko
|
b5a5f2707a
|
Draft OpenID Connect support.
|
2026-02-14 23:01:13 +00:00 |
|
|
Leo Vasanko
|
a9cf518296
|
Add version indication and link to our site on profile page (bottom right corner).
|
2026-02-11 01:36:58 +00:00 |
|
|
Leo Vasanko
|
0af7d4b939
|
Less eagerly enable very wide layout for user profile (only if more than 8 items for passkeys or per site sessions).
|
2026-02-11 01:24:23 +00:00 |
|
|
Leo Vasanko
|
419f69cef5
|
Style overhaul.
|
2026-02-11 01:18:19 +00:00 |
|
|
Leo Vasanko
|
a5b207b2b6
|
Upgrade fastapi-vue-setup.
|
2026-02-09 16:29:24 +00:00 |
|
|
Leo Vasanko
|
fa378eb82e
|
Improved client IP and UA handling.
|
2026-02-05 18:02:23 +00:00 |
|
|
Leo Vasanko
|
e1f6c85ced
|
Improved theme picker
|
2026-02-05 16:19:06 +00:00 |
|
|
Leo Vasanko
|
ad347a9d8a
|
Load stylesheets directly from HTML to avoid flashing wrong background color first.
|
2026-02-05 15:39:51 +00:00 |
|
|
Leo Vasanko
|
df8bbef8de
|
Styling updates, more robust dynamic/userpref light/dark switching. Sync with paskia-js.
|
2026-02-05 15:34:02 +00:00 |
|
|
Leo Vasanko
|
9a6614f057
|
Improved UI feedback on registration link creation.
|
2026-02-05 14:26:11 +00:00 |
|
|
Leo Vasanko
|
4953920dbf
|
Better UI for role deletions.
|
2026-02-05 14:05:36 +00:00 |
|
|
Leo Vasanko
|
f39986412a
|
API/DB cleanup for flat URLs that don't include org where users etc. are referred to. Implement user deletion in admin app and API, UI improvement. Reset token DB factory function revised to create passphrase and key internally. Removed unneeded functions and args, using update_user_role instead of a separate deleted _in_organization function.
|
2026-02-05 14:05:31 +00:00 |
|
|
Leo Vasanko
|
6f1dfd1ab5
|
Missing theme file. Added favicon.
|
2026-01-31 00:25:38 +00:00 |
|
|
Leo Vasanko
|
cc439aaf12
|
Light/dark selection in user profile, if set this is preferred on the whole system, together with app overrides (the first one on the URL wins).
|
2026-01-30 23:31:06 +00:00 |
|
|
Leo Vasanko
|
0096727b41
|
Light/dark override for in-app login dialogs to match app style e.g. light only
|
2026-01-30 23:00:02 +00:00 |
|
|
Leo Vasanko
|
5fc5226480
|
Create a stand-alone paskia npm package (paskia-js). Make the frontend use it (but from source tree to keep synced).
|
2026-01-29 19:46:26 +00:00 |
|
|
Leo Vasanko
|
d8743d9f90
|
Refactor to separate paskia lib functionality generally useful for various apps.
|
2026-01-29 16:55:46 +00:00 |
|
|
Leo Vasanko
|
760b109eef
|
Consistent and stronger session revalidation checks in Auth profile and Admin App. Fix missing handling of link generation network errors.
|
2026-01-29 16:02:29 +00:00 |
|
|
Leo Vasanko
|
8a6540aa91
|
Fix background task still running twice, and add a check to prevent that happening again (double expiry).
|
2026-01-27 23:51:13 +00:00 |
|
|
Leo Vasanko
|
d40a2b8682
|
DB transactions cleanup, better actor/user data. Simplified admin API. Use UUID to refer to a specific permission in admin API. Other cleanup.
|
2026-01-27 21:48:21 +00:00 |
|
|
Leo Vasanko
|
071a7b9e0b
|
Remove credentials: 'include', a mechanism that we don't actually use.
|
2026-01-27 15:23:19 +00:00 |
|
|
Leo Vasanko
|
2413a32bda
|
Update the API to use new naming matching database.
|
2026-01-27 02:22:29 +00:00 |
|
|
Leo Vasanko
|
f6e995184f
|
Refactor validate endpoint to return session context, leaving user-info only for extra profile data. Completely separate token-info for reset tokens. Simplified by reusing same data structures in various places and mandating fields to have values not needing fallbacks. Implemented consistent AccessDenied view in profile and admin apps.
|
2026-01-26 19:40:48 +00:00 |
|
|
Leo Vasanko
|
21364fc621
|
Use fastapi-vue-setup, merging its template scripts to old Paskia entry point and devserver. Simplified CLI, no longer uses serve subcommand. Fixed the URL displayed on banner to show to actual frontend/caddy server even in devmode.
|
2026-01-25 03:15:50 +00:00 |
|
|
Leo Vasanko
|
2227a9bf6f
|
Refer permissions by UUID rather than scope.
|
2026-01-24 00:06:08 +00:00 |
|
|
Leo Vasanko
|
c6dadd283d
|
Change PUT to PATCH for intent-based updates, avoiding override of fields not intended to change. This preserves role permissions matrix even if the permission is temporarily removed from the org.
|
2026-01-23 15:41:23 +00:00 |
|
|
Leo Vasanko
|
4c1db37c73
|
Better handling of Org Admin permission. More guardrails for Master Admin not locking himself out by changes. Admin app UI improvements.
|
2026-01-23 15:11:01 +00:00 |
|
|
Leo Vasanko
|
253387be97
|
Permissions refactor. Permissions have UUID and scope (previously id) and the latter no longer needs to be unique. Org admin uses a single global permission now. Domain scoped permissions. Removed from user info the admin fields, use effective_permission checks instead.
|
2026-01-23 13:54:31 +00:00 |
|
|
Leo Vasanko
|
cdcaa5a199
|
Remove layout max width.
|
2025-12-10 20:53:59 +00:00 |
|
|
Leo Vasanko
|
541a019c13
|
Fix dialog patterns in admin app: dialog must close before doing API calls to avoid conflict with authentication dialogs.
|
2025-12-10 20:42:12 +00:00 |
|
|
Leo Vasanko
|
841ebf70c5
|
Cleanup on Admin app, better delete confirmations.
|
2025-12-10 20:16:57 +00:00 |
|
|
Leo Vasanko
|
1143032eca
|
Adopt <dialog> for our modals to tap into browser built-in functionality.
|
2025-12-10 19:41:55 +00:00 |
|
|
Leo Vasanko
|
683a912899
|
Revised light color scheme for a more professional look.
|
2025-12-10 19:40:59 +00:00 |
|
|
Leo Vasanko
|
727db38bc7
|
UX: Close the QR code/link dialog automatically when the code is click-to-copied.
|
2025-12-10 19:07:56 +00:00 |
|
|
Leo Vasanko
|
b2eb5e5e36
|
Fix regression from adding color-scheme: light dark improperly at :root (html) rather than at body.
|
2025-12-10 18:47:56 +00:00 |
|
|
Leo Vasanko
|
c89fc71ebb
|
Use absolute paths for resources so that the links work when Vite is serving these at root instead of /auth/
|
2025-12-10 18:30:45 +00:00 |
|
|
Leo Vasanko
|
ccbe0f2f6f
|
Improved breadcrumbs on auth host.
|
2025-12-10 18:20:37 +00:00 |
|
|
Leo Vasanko
|
2468fbd7fc
|
Vite devserver configuration that behaves correctly for auth-host, serving the profile view at site root and /admin/ instead of under /auth/.
|
2025-12-10 18:18:14 +00:00 |
|
|
Leo Vasanko
|
f8b927c012
|
Fix button row layout problem from the responsive layout cleanup before, that was causing them display stretched to full window width. Now they only shrink.
|
2025-12-10 17:43:10 +00:00 |
|
|
Leo Vasanko
|
8310d9f0b5
|
Fix link copy toast messages, remove custom toast in favor of authStore, remove a component that was no longer used.
|
2025-12-10 17:18:48 +00:00 |
|
|
Leo Vasanko
|
b9b6c9356f
|
Change input placeholder that was improperly triggering Bitwarden to complete username in it. BW does not respect autocomplete at all.
|
2025-12-10 16:56:19 +00:00 |
|