 Leo Vasanko
|
afbd9606db
|
Revert earlier change to iframe srcdoc, using src instead, because srcdoc was not compatible with all passkey implementations (BitWarden).
|
2025-12-03 18:01:47 -06:00 |
|
|
Leo Vasanko
|
9b73684082
|
Log authentication options on the client.
|
2025-12-03 17:07:44 -06:00 |
|
|
Leo Vasanko
|
9786c2a5a8
|
Improved dialog layout with separate mobile portrait mode.
|
2025-12-03 16:06:32 -06:00 |
|
|
Leo Vasanko
|
3e10e082e2
|
Fix infinitely nested login iframes when the restricted app notices it needs login.
|
2025-12-03 15:56:17 -06:00 |
|
|
Leo Vasanko
|
7a70c933c9
|
Various fixes and cleanup, regressions from prior commits.
|
2025-12-03 15:40:59 -06:00 |
|
|
Leo Vasanko
|
6a7b1a876e
|
Fix syntax error in reset app created by earlier commit.
|
2025-12-03 14:31:13 -06:00 |
|
|
Leo Vasanko
|
ad63d3fb3a
|
Better static files handling on backend, when in dev mode: fetch from vite.
|
2025-12-03 14:30:02 -06:00 |
|
|
Leo Vasanko
|
9488f69e53
|
Update forward API to return in JSON iframe srcdoc with options injected. (currently broken in dev mode).
|
2025-12-03 13:58:18 -06:00 |
|
|
Leo Vasanko
|
1610869fae
|
Fix fetch timeout rolling while in authentication flow. Now each fetch gets a fresh timeout.
|
2025-12-03 13:35:44 -06:00 |
|
|
Leo Vasanko
|
219dd70665
|
Viewing linked passkeys/sessions (by clicking either one of them).
|
2025-12-03 13:21:52 -06:00 |
|
|
Leo Vasanko
|
4306323c44
|
Consistently use apiJson for fetches, with timeout and proper error handling (less code duplication).
|
2025-12-03 13:00:24 -06:00 |
|
|
Leo Vasanko
|
ceb99de738
|
Improved auth profile UX, consistent transparent-blur dialog background everywhere.
|
2025-12-03 12:30:23 -06:00 |
|
|
Leo Vasanko
|
ad374f5dda
|
Formatting, tidy up, transparent auth dialog background.
|
2025-12-03 11:33:24 -06:00 |
|
|
Leo Vasanko
|
1ffc918a88
|
Improved apiFetch and jsonFetch functions.
|
2025-12-03 11:26:38 -06:00 |
|
|
Leo Vasanko
|
1f75e0a305
|
Make auth/admin apps API calls use apiFetch, a new function that asks for permission by iframe if needed. Implement max-age checks for API authz.verify as well along with a custom exception type that carries metadata.
|
2025-12-03 11:17:02 -06:00 |
|
|
Leo Vasanko
|
7b0a9c2a2a
|
Reload backend only on changes on the backend or frontend-build within, not outside that in the repo.
|
2025-12-03 10:58:48 -06:00 |
|
|
Leo Vasanko
|
1c985527cf
|
Add E2E tests to register and verify passkey.
|
2025-12-03 02:52:39 +00:00 |
|
|
Leo Vasanko
|
6003189da2
|
Always use timezone aware UTC time.
|
2025-12-03 01:36:15 +00:00 |
|
|
Leo Vasanko
|
2e9895443b
|
Improved session list IP handling. Hovering sessions shows Same IP on matching sessions.
|
2025-12-03 01:32:05 +00:00 |
|
|
Leo Vasanko
|
bd13dbd1a0
|
Implement session termination in admin API, for completeness.
|
2025-12-03 01:20:52 +00:00 |
|
|
Leo Vasanko
|
ca8d65ad25
|
Improved profile view layout.
|
2025-12-03 01:04:07 +00:00 |
|
|
Leo Vasanko
|
70411fa77b
|
Improved profile view layout.
|
2025-12-03 00:52:52 +00:00 |
|
|
Leo Vasanko
|
3967e93c37
|
Fix examples folder serving broken a couple of commits ago.
|
2025-12-03 00:06:32 +00:00 |
|
|
Leo Vasanko
|
10ce0126b0
|
Implement metadata for RestrictedForward, set by /auth/api/forward endpoint when returning the app. Use this to implement support for time-based reauth requirement.
|
2025-12-02 23:39:31 +00:00 |
|
|
Leo Vasanko
|
aed48de38e
|
Vite proxy config simplified. Renaming /auth/restricted to have a trailing slash for better Vite compatibility.
|
2025-12-02 22:41:12 +00:00 |
|
|
Leo Vasanko
|
c83450dace
|
Major refactor of frontend source tree such that paths better match where they are served.
|
2025-12-02 22:09:07 +00:00 |
|
|
Leo Vasanko
|
123a62549b
|
Refactor restricted app paths and naming.
|
2025-12-02 19:10:13 +00:00 |
|
|
Leo Vasanko
|
2a5f06d707
|
Moved the restricted-api iframe src to /auth/api/restricted and removed the endpoint of the other restricted app.
|
2025-12-02 18:34:59 +00:00 |
|
|
Leo Vasanko
|
3441a7a2b3
|
Remove backend access control, now that the profile and admin apps handle that via API.
|
2025-12-02 18:25:58 +00:00 |
|
|
Leo Vasanko
|
7ace4dcb4b
|
Fix the back buttons (navigate back if you can but close if it was a new window).
|
2025-12-02 18:13:23 +00:00 |
|
|
Leo Vasanko
|
6f9f4aefc1
|
Implement Forbidden view for API calls, cleanup and better UX.
|
2025-12-02 17:36:37 +00:00 |
|
|
Leo Vasanko
|
a05d4aec81
|
Better error messages from backend, avoid bad toasts, cleanup of session validation.
|
2025-12-02 16:37:27 +00:00 |
|
|
Leo Vasanko
|
77d8e97dc9
|
Update admin app authentication in API mode too, reusing components between it and the main app.
|
2025-12-02 15:42:55 +00:00 |
|
|
Leo Vasanko
|
d1a7a53c19
|
Implemented auth app authentication in API mode (if loading the app itself wasn't blocked). Removed unnecessary toasts when entering restricted pages.
|
2025-12-02 15:25:31 +00:00 |
|
|
Leo Vasanko
|
2c777661b8
|
Refactor lengthy user info formatting to its own utility module that doesn't depend on FastAPI.
|
2025-12-02 14:30:31 +00:00 |
|
|
Leo Vasanko
|
cb26c61d5f
|
Implement restricted-api for JS-driven auth calls, examples added (WIP!). Layout and styling simplified.
|
2025-12-02 03:10:16 +00:00 |
|
|
Leo Vasanko
|
74a7723300
|
Updated frontend running dev mode using deno/npm/bun as well. Additional dev mode Caddyfile to go https://localhost/.
|
2025-12-01 20:07:26 +00:00 |
|
|
Leo Vasanko
|
0678d7f9ec
|
Updated build-frontend script, now uses deno, npm, bun in this order.
|
2025-12-01 19:25:08 +00:00 |
|
|
Leo Vasanko
|
07525b47ae
|
Centralise all cookie handling to session.py.
|
2025-10-04 18:48:24 -06:00 |
|
|
Leo Vasanko
|
1ad1644b64
|
Refactor /api/user/* to its own module.
|
2025-10-04 18:41:35 -06:00 |
|
|
Leo Vasanko
|
876215f1c1
|
Reset dialog UX improved.
|
2025-10-04 18:40:46 -06:00 |
|
|
Leo Vasanko
|
59e7e40128
|
Harmonise ProfileView and HostApp.
|
2025-10-04 18:14:17 -06:00 |
|
|
Leo Vasanko
|
a0da799c9e
|
Tuning the host app.
|
2025-10-04 18:06:47 -06:00 |
|
|
Leo Vasanko
|
94efb00e34
|
Don't redirect non-auth-host /auth/ to auth site but show basic info on current host, and allow logging out. Adds a new host app for this purpose.
|
2025-10-04 17:55:08 -06:00 |
|
|
Leo Vasanko
|
f9f4d59c6b
|
Deny creating sessions for hosts other than rp-id subdomains.
|
2025-10-04 17:26:03 -06:00 |
|
|
Leo Vasanko
|
45f9870d0d
|
WebSockets must use origin for finding the host calling them.
|
2025-10-04 17:16:51 -06:00 |
|
|
Leo Vasanko
|
2a81544701
|
Correction on restricted path checking (auth-host).
|
2025-10-04 16:59:05 -06:00 |
|
|
Leo Vasanko
|
a60c1bd5f5
|
Refactor auth-host redirection middleware to its own module.
Implement redirection to remove /auth/ from UI URLs when on auth-host.
|
2025-10-04 16:49:23 -06:00 |
|
|
Leo Vasanko
|
229f066533
|
Add validation of the CLI specified --auth-host (needs to be within rp-id).
|
2025-10-04 16:35:55 -06:00 |
|
|
Leo Vasanko
|
97f653e116
|
Fix deletion of session cookie on host logout.
|
2025-10-04 16:26:36 -06:00 |
|