 Leo Vasanko
|
1f75e0a305
|
Make auth/admin apps API calls use apiFetch, a new function that asks for permission by iframe if needed. Implement max-age checks for API authz.verify as well along with a custom exception type that carries metadata.
|
2025-12-03 11:17:02 -06:00 |
|
|
Leo Vasanko
|
10ce0126b0
|
Implement metadata for RestrictedForward, set by /auth/api/forward endpoint when returning the app. Use this to implement support for time-based reauth requirement.
|
2025-12-02 23:39:31 +00:00 |
|
|
Leo Vasanko
|
591ea626bf
|
Add host-based authentication, UTC timestamps, session management, and secure cookies; fix styling issues; refactor to remove module; update database schema for sessions and reset tokens.
|
2025-10-03 18:31:54 -06:00 |
|
|
Leo Vasanko
|
b324276173
|
Cleaned up login/logout flows.
|
2025-09-02 19:08:16 -06:00 |
|
|
Leo Vasanko
|
bfc777fb56
|
Refactoring permissions checks.
|
2025-09-02 17:28:26 -06:00 |
|
|
Leo Vasanko
|
d045e1c520
|
Make default permissions use only : as separator.
|
2025-08-30 18:43:49 -06:00 |
|
|
Leo Vasanko
|
16de7b5f1f
|
Allow specifying multiple permissions.
|
2025-08-30 16:47:38 -06:00 |
|
|
Leo Vasanko
|
cb17a332a3
|
Add permission check on forward-auth and validate.
|
2025-08-30 16:14:39 -06:00 |
|