 Leo Vasanko
|
9d7ace8fb5
|
Refactor dev mode into a source repo script (remove dev subcommand from package).
|
2025-12-05 13:08:44 +00:00 |
|
|
Leo Vasanko
|
39c06620c4
|
Updated E2E tests.
|
2025-12-04 04:44:58 +00:00 |
|
|
Leo Vasanko
|
8011a0d910
|
Make dev mode run without static files, only serving assets in production.
|
2025-12-03 22:15:26 -06:00 |
|
|
Leo Vasanko
|
4c34217846
|
Cleanup old hostapp files (finished, working).
|
2025-12-03 22:06:54 -06:00 |
|
|
Leo Vasanko
|
5c72777c2f
|
Missing new component.
|
2025-12-03 22:03:33 -06:00 |
|
|
Leo Vasanko
|
18eed4654f
|
Integrate host app to main app (WIP).
|
2025-12-03 22:00:47 -06:00 |
|
|
Leo Vasanko
|
b373a84065
|
Admin app simplification by using API auth properly. Implemented promise to keep request blocked by permission check while the user authenticates, fixing concurrent requests.
|
2025-12-03 21:19:40 -06:00 |
|
|
Leo Vasanko
|
7983d9b170
|
Brought examples directly to front page.
|
2025-12-03 21:10:08 -06:00 |
|
|
Leo Vasanko
|
bc4254ad18
|
Fix view switching of restricted app.
|
2025-12-03 19:46:36 -06:00 |
|
|
Leo Vasanko
|
d541377798
|
Make restricted app use simple fetch that doesn't do API authentication (recursively).
|
2025-12-03 18:20:14 -06:00 |
|
|
Leo Vasanko
|
7c82727d28
|
Fixed and simplified examples.
|
2025-12-03 18:08:52 -06:00 |
|
|
Leo Vasanko
|
afbd9606db
|
Revert earlier change to iframe srcdoc, using src instead, because srcdoc was not compatible with all passkey implementations (BitWarden).
|
2025-12-03 18:01:47 -06:00 |
|
|
Leo Vasanko
|
9b73684082
|
Log authentication options on the client.
|
2025-12-03 17:07:44 -06:00 |
|
|
Leo Vasanko
|
9786c2a5a8
|
Improved dialog layout with separate mobile portrait mode.
|
2025-12-03 16:06:32 -06:00 |
|
|
Leo Vasanko
|
3e10e082e2
|
Fix infinitely nested login iframes when the restricted app notices it needs login.
|
2025-12-03 15:56:17 -06:00 |
|
|
Leo Vasanko
|
7a70c933c9
|
Various fixes and cleanup, regressions from prior commits.
|
2025-12-03 15:40:59 -06:00 |
|
|
Leo Vasanko
|
6a7b1a876e
|
Fix syntax error in reset app created by earlier commit.
|
2025-12-03 14:31:13 -06:00 |
|
|
Leo Vasanko
|
ad63d3fb3a
|
Better static files handling on backend, when in dev mode: fetch from vite.
|
2025-12-03 14:30:02 -06:00 |
|
|
Leo Vasanko
|
9488f69e53
|
Update forward API to return in JSON iframe srcdoc with options injected. (currently broken in dev mode).
|
2025-12-03 13:58:18 -06:00 |
|
|
Leo Vasanko
|
1610869fae
|
Fix fetch timeout rolling while in authentication flow. Now each fetch gets a fresh timeout.
|
2025-12-03 13:35:44 -06:00 |
|
|
Leo Vasanko
|
219dd70665
|
Viewing linked passkeys/sessions (by clicking either one of them).
|
2025-12-03 13:21:52 -06:00 |
|
|
Leo Vasanko
|
4306323c44
|
Consistently use apiJson for fetches, with timeout and proper error handling (less code duplication).
|
2025-12-03 13:00:24 -06:00 |
|
|
Leo Vasanko
|
ceb99de738
|
Improved auth profile UX, consistent transparent-blur dialog background everywhere.
|
2025-12-03 12:30:23 -06:00 |
|
|
Leo Vasanko
|
ad374f5dda
|
Formatting, tidy up, transparent auth dialog background.
|
2025-12-03 11:33:24 -06:00 |
|
|
Leo Vasanko
|
1ffc918a88
|
Improved apiFetch and jsonFetch functions.
|
2025-12-03 11:26:38 -06:00 |
|
|
Leo Vasanko
|
1f75e0a305
|
Make auth/admin apps API calls use apiFetch, a new function that asks for permission by iframe if needed. Implement max-age checks for API authz.verify as well along with a custom exception type that carries metadata.
|
2025-12-03 11:17:02 -06:00 |
|
|
Leo Vasanko
|
7b0a9c2a2a
|
Reload backend only on changes on the backend or frontend-build within, not outside that in the repo.
|
2025-12-03 10:58:48 -06:00 |
|
|
Leo Vasanko
|
1c985527cf
|
Add E2E tests to register and verify passkey.
|
2025-12-03 02:52:39 +00:00 |
|
|
Leo Vasanko
|
6003189da2
|
Always use timezone aware UTC time.
|
2025-12-03 01:36:15 +00:00 |
|
|
Leo Vasanko
|
2e9895443b
|
Improved session list IP handling. Hovering sessions shows Same IP on matching sessions.
|
2025-12-03 01:32:05 +00:00 |
|
|
Leo Vasanko
|
bd13dbd1a0
|
Implement session termination in admin API, for completeness.
|
2025-12-03 01:20:52 +00:00 |
|
|
Leo Vasanko
|
ca8d65ad25
|
Improved profile view layout.
|
2025-12-03 01:04:07 +00:00 |
|
|
Leo Vasanko
|
70411fa77b
|
Improved profile view layout.
|
2025-12-03 00:52:52 +00:00 |
|
|
Leo Vasanko
|
3967e93c37
|
Fix examples folder serving broken a couple of commits ago.
|
2025-12-03 00:06:32 +00:00 |
|
|
Leo Vasanko
|
10ce0126b0
|
Implement metadata for RestrictedForward, set by /auth/api/forward endpoint when returning the app. Use this to implement support for time-based reauth requirement.
|
2025-12-02 23:39:31 +00:00 |
|
|
Leo Vasanko
|
aed48de38e
|
Vite proxy config simplified. Renaming /auth/restricted to have a trailing slash for better Vite compatibility.
|
2025-12-02 22:41:12 +00:00 |
|
|
Leo Vasanko
|
c83450dace
|
Major refactor of frontend source tree such that paths better match where they are served.
|
2025-12-02 22:09:07 +00:00 |
|
|
Leo Vasanko
|
123a62549b
|
Refactor restricted app paths and naming.
|
2025-12-02 19:10:13 +00:00 |
|
|
Leo Vasanko
|
2a5f06d707
|
Moved the restricted-api iframe src to /auth/api/restricted and removed the endpoint of the other restricted app.
|
2025-12-02 18:34:59 +00:00 |
|
|
Leo Vasanko
|
3441a7a2b3
|
Remove backend access control, now that the profile and admin apps handle that via API.
|
2025-12-02 18:25:58 +00:00 |
|
|
Leo Vasanko
|
7ace4dcb4b
|
Fix the back buttons (navigate back if you can but close if it was a new window).
|
2025-12-02 18:13:23 +00:00 |
|
|
Leo Vasanko
|
6f9f4aefc1
|
Implement Forbidden view for API calls, cleanup and better UX.
|
2025-12-02 17:36:37 +00:00 |
|
|
Leo Vasanko
|
a05d4aec81
|
Better error messages from backend, avoid bad toasts, cleanup of session validation.
|
2025-12-02 16:37:27 +00:00 |
|
|
Leo Vasanko
|
77d8e97dc9
|
Update admin app authentication in API mode too, reusing components between it and the main app.
|
2025-12-02 15:42:55 +00:00 |
|
|
Leo Vasanko
|
d1a7a53c19
|
Implemented auth app authentication in API mode (if loading the app itself wasn't blocked). Removed unnecessary toasts when entering restricted pages.
|
2025-12-02 15:25:31 +00:00 |
|
|
Leo Vasanko
|
2c777661b8
|
Refactor lengthy user info formatting to its own utility module that doesn't depend on FastAPI.
|
2025-12-02 14:30:31 +00:00 |
|
|
Leo Vasanko
|
cb26c61d5f
|
Implement restricted-api for JS-driven auth calls, examples added (WIP!). Layout and styling simplified.
|
2025-12-02 03:10:16 +00:00 |
|
|
Leo Vasanko
|
74a7723300
|
Updated frontend running dev mode using deno/npm/bun as well. Additional dev mode Caddyfile to go https://localhost/.
|
2025-12-01 20:07:26 +00:00 |
|
|
Leo Vasanko
|
0678d7f9ec
|
Updated build-frontend script, now uses deno, npm, bun in this order.
|
2025-12-01 19:25:08 +00:00 |
|
|
Leo Vasanko
|
07525b47ae
|
Centralise all cookie handling to session.py.
|
2025-10-04 18:48:24 -06:00 |
|