LeoVasanko
c4bf411404
Use origin from requests, rather than hardcode it. This is still constrained to rp_id and its subdomains, so it should be fine for security, also WebSockets make sure the origin doesn't change between stages of the chat.
2025-07-14 00:55:01 +00:00
LeoVasanko
6142023ffe
Major cleanup, refactoring, device registrations.
2025-07-14 00:40:22 +00:00
LeoVasanko
3135def2d7
Refactoring in progress, needs cleanup.
2025-07-08 03:00:02 +00:00
LeoVasanko
ef01fde84a
Mostly working, saving.
2025-07-08 01:19:39 +00:00
LeoVasanko
b358afdfbb
More refactoring. Prevent registering another key on the same authenticator for the same user.
2025-07-07 23:20:28 +00:00
LeoVasanko
304b6b8cef
Major refactor: HTTP-only cookies, passkey management, and UI improvements
...
- Refactor session management from WebSocket tokens to HTTP-only cookies
- Move user/credential endpoints from WebSocket to HTTP REST API
- Add comprehensive passkey management (add/delete with safety checks)
- Implement AAGUID-based authenticator info with icons and names
- Add human-readable date formatting and clean grid layout
- Create modular architecture with session_manager, api_handlers, aaguid_manager
2025-07-07 07:45:33 +00:00
LeoVasanko
dec0deafc0
Finish refactoring, working.
2025-07-07 00:06:22 +00:00
LeoVasanko
160310acf6
Refactoring for simplicity, added last login/verification tracking.
2025-07-06 22:34:32 +00:00
LeoVasanko
5a8868d58c
General cleanup and minor improvements. Registration and auth currently working.
2025-07-05 05:08:56 +00:00
LeoVasanko
3f373a9a8a
Refactoring done, bugs gone.
2025-07-04 06:46:05 +00:00
LeoVasanko
a6e80ffcb5
A non-functional draft, saving to allow reverts.
2025-07-04 05:01:41 +00:00
LeoVasanko