Leo Vasanko
99c60f0e16
Massive refactoring of remote auth and related functionality. (WIP)
2025-12-08 22:39:57 +00:00
Leo Vasanko
a54d872b46
Various improvements to remote link login. PoW algorithm tuned. Added base64url and helper modules.
2025-12-07 20:12:38 +00:00
Leo Vasanko
4bb64863f9
Proper PoW, unified verification WS etc
2025-12-07 04:12:11 +00:00
Leo Vasanko
b373a84065
Admin app simplification by using API auth properly. Implemented promise to keep request blocked by permission check while the user authenticates, fixing concurrent requests.
2025-12-03 21:19:40 -06:00
Leo Vasanko
d541377798
Make restricted app use simple fetch that doesn't do API authentication (recursively).
2025-12-03 18:20:14 -06:00
Leo Vasanko
afbd9606db
Revert earlier change to iframe srcdoc, using src instead, because srcdoc was not compatible with all passkey implementations (BitWarden).
2025-12-03 18:01:47 -06:00
Leo Vasanko
9b73684082
Log authentication options on the client.
2025-12-03 17:07:44 -06:00
Leo Vasanko
3e10e082e2
Fix infinitely nested login iframes when the restricted app notices it needs login.
2025-12-03 15:56:17 -06:00
Leo Vasanko
7a70c933c9
Various fixes and cleanup, regressions from prior commits.
2025-12-03 15:40:59 -06:00
Leo Vasanko
9488f69e53
Update forward API to return in JSON iframe srcdoc with options injected. (currently broken in dev mode).
2025-12-03 13:58:18 -06:00
Leo Vasanko
1610869fae
Fix fetch timeout rolling while in authentication flow. Now each fetch gets a fresh timeout.
2025-12-03 13:35:44 -06:00
Leo Vasanko
4306323c44
Consistently use apiJson for fetches, with timeout and proper error handling (less code duplication).
2025-12-03 13:00:24 -06:00
Leo Vasanko
ceb99de738
Improved auth profile UX, consistent transparent-blur dialog background everywhere.
2025-12-03 12:30:23 -06:00
Leo Vasanko
1ffc918a88
Improved apiFetch and jsonFetch functions.
2025-12-03 11:26:38 -06:00
Leo Vasanko
1f75e0a305
Make auth/admin apps API calls use apiFetch, a new function that asks for permission by iframe if needed. Implement max-age checks for API authz.verify as well along with a custom exception type that carries metadata.
2025-12-03 11:17:02 -06:00
Leo Vasanko
7ace4dcb4b
Fix the back buttons (navigate back if you can but close if it was a new window).
2025-12-02 18:13:23 +00:00
Leo Vasanko
a05d4aec81
Better error messages from backend, avoid bad toasts, cleanup of session validation.
2025-12-02 16:37:27 +00:00
Leo Vasanko
bfb11cc20f
A major refactoring for more consistent and stricter flows.
...
- Force using the dedicated authentication site configured via auth-host
- Stricter host validation
- Using the restricted app consistently for all access control (instead of the old loginview).
2025-10-04 15:55:43 -06:00
Leo Vasanko
591ea626bf
Add host-based authentication, UTC timestamps, session management, and secure cookies; fix styling issues; refactor to remove module; update database schema for sessions and reset tokens.
2025-10-03 18:31:54 -06:00
Leo Vasanko
0e7858b15d
Redux
2025-09-01 20:21:20 -06:00
Leo Vasanko
028313eb27
Support WS connections on older browsers.
2025-09-01 20:15:14 -06:00
Leo Vasanko
37eaffff3f
Renaming of users in registration, profile and admin app.
2025-09-01 18:13:01 -06:00
Leo Vasanko
3e5c0065d5
Remodel reset token handling due to browsers sometimes refusing to set the cookie when opening the link (from another site).
2025-08-30 15:54:17 -06:00
Leo Vasanko
407994548a
Almost complete org/permission handling. Much cleanup, bootstrap works.
2025-08-07 13:58:12 -06:00
Leo Vasanko
f96668b135
Cleaner error message on aborted Passkey operations.
2025-08-06 12:00:23 -06:00
Leo Vasanko
9f423135ed
Refactor to not use status: success, but HTTP codes, and renamed the error key to detail to match FastAPI's own.
2025-08-06 10:09:55 -06:00
Leo Vasanko
cf138d90c5
Checkpoint, fixing reset token handling broken in earlier edits.
2025-08-06 09:55:14 -06:00
Leo Vasanko
8882d0672b
Frontend adjusted for the new API.
2025-08-01 13:16:10 -06:00
Leo Vasanko
c5e5fe23e3
Major cleanup and refactoring of the backend (frontend not fully updated).
2025-08-01 12:32:27 -06:00
Leo Vasanko
225d7b7542
Refactoring reset and session tokens, currently broken.
2025-07-14 16:10:02 -06:00
Leo Vasanko
1c79132e22
Nxing/Caddy forward_auth support. Various fixes to bugs created in earlier edits. Vite server needs different base in dev mode, fixed.
2025-07-13 16:54:53 -06:00
Leo Vasanko
f9f263171b
Move the whole app under /auth/, fix static build.
2025-07-13 14:03:15 -06:00
Leo Vasanko
9711453553
Rewritten frontend with Vue
2025-07-13 12:41:08 -06:00
Leo Vasanko