 Leo Vasanko
|
afbd9606db
|
Revert earlier change to iframe srcdoc, using src instead, because srcdoc was not compatible with all passkey implementations (BitWarden).
|
2025-12-03 18:01:47 -06:00 |
|
|
Leo Vasanko
|
ad63d3fb3a
|
Better static files handling on backend, when in dev mode: fetch from vite.
|
2025-12-03 14:30:02 -06:00 |
|
|
Leo Vasanko
|
9488f69e53
|
Update forward API to return in JSON iframe srcdoc with options injected. (currently broken in dev mode).
|
2025-12-03 13:58:18 -06:00 |
|
|
Leo Vasanko
|
1f75e0a305
|
Make auth/admin apps API calls use apiFetch, a new function that asks for permission by iframe if needed. Implement max-age checks for API authz.verify as well along with a custom exception type that carries metadata.
|
2025-12-03 11:17:02 -06:00 |
|
|
Leo Vasanko
|
10ce0126b0
|
Implement metadata for RestrictedForward, set by /auth/api/forward endpoint when returning the app. Use this to implement support for time-based reauth requirement.
|
2025-12-02 23:39:31 +00:00 |
|
|
Leo Vasanko
|
591ea626bf
|
Add host-based authentication, UTC timestamps, session management, and secure cookies; fix styling issues; refactor to remove module; update database schema for sessions and reset tokens.
|
2025-10-03 18:31:54 -06:00 |
|
|
Leo Vasanko
|
b324276173
|
Cleaned up login/logout flows.
|
2025-09-02 19:08:16 -06:00 |
|
|
Leo Vasanko
|
bfc777fb56
|
Refactoring permissions checks.
|
2025-09-02 17:28:26 -06:00 |
|
|
Leo Vasanko
|
d045e1c520
|
Make default permissions use only : as separator.
|
2025-08-30 18:43:49 -06:00 |
|
|
Leo Vasanko
|
16de7b5f1f
|
Allow specifying multiple permissions.
|
2025-08-30 16:47:38 -06:00 |
|
|
Leo Vasanko
|
cb17a332a3
|
Add permission check on forward-auth and validate.
|
2025-08-30 16:14:39 -06:00 |
|