Leo Vasanko
d1a7a53c19
Implemented auth app authentication in API mode (if loading the app itself wasn't blocked). Removed unnecessary toasts when entering restricted pages.
2025-12-02 15:25:31 +00:00
Leo Vasanko
cb26c61d5f
Implement restricted-api for JS-driven auth calls, examples added (WIP!). Layout and styling simplified.
2025-12-02 03:10:16 +00:00
Leo Vasanko
876215f1c1
Reset dialog UX improved.
2025-10-04 18:40:46 -06:00
Leo Vasanko
59e7e40128
Harmonise ProfileView and HostApp.
2025-10-04 18:14:17 -06:00
Leo Vasanko
a0da799c9e
Tuning the host app.
2025-10-04 18:06:47 -06:00
Leo Vasanko
94efb00e34
Don't redirect non-auth-host /auth/ to auth site but show basic info on current host, and allow logging out. Adds a new host app for this purpose.
2025-10-04 17:55:08 -06:00
Leo Vasanko
29be642dbe
Better UX for profile view logout buttons.
2025-10-04 16:22:16 -06:00
Leo Vasanko
bfb11cc20f
A major refactoring for more consistent and stricter flows.
...
- Force using the dedicated authentication site configured via auth-host
- Stricter host validation
- Using the restricted app consistently for all access control (instead of the old loginview).
2025-10-04 15:55:43 -06:00
Leo Vasanko
389e05730b
Refactor user editing endpoints (only auth site) under api/user/ while leaving host-based endpoints at api root.
2025-10-04 08:59:51 -06:00
Leo Vasanko
79b6c50a9c
More consistent shared styling between credential and session cards.
2025-10-04 08:32:27 -06:00
Leo Vasanko
591ea626bf
Add host-based authentication, UTC timestamps, session management, and secure cookies; fix styling issues; refactor to remove module; update database schema for sessions and reset tokens.
2025-10-03 18:31:54 -06:00
Leo Vasanko
5d8304bbd9
Refactor user-profile, restricted access and reset token registration as separate apps so the frontend does not need to guess which context it is running in.
...
Support user-navigable URLs at / as well as /auth/, allowing for a dedicated authentication site with pretty URLs.
2025-10-02 15:44:48 -06:00
Leo Vasanko
382341e5ee
Make the login/reset/forbidden dialogs look better.
2025-09-30 17:03:51 -06:00
Leo Vasanko
ed7d3ee0fc
Admin app: guard rails extended, consistent styling, also share styling with main app.
2025-09-30 16:38:14 -06:00
Leo Vasanko
3dff459068
Remove duplicate message from permission denied page.
2025-09-30 12:56:41 -06:00
Leo Vasanko
89b40cd080
Admin app divided to separate components.
2025-09-30 12:54:18 -06:00
Leo Vasanko
d46d50b91a
Massive style redesign, WIP.
2025-09-29 21:02:49 -06:00
Leo Vasanko
d5bc3e773d
Clear sessionStorage on logout.
2025-09-28 19:45:37 -06:00
Leo Vasanko
6439437e8b
Implement breadcrumb navigation.
2025-09-27 20:47:45 -06:00
Leo Vasanko
b0a1bb72dc
Cleaner logout.
2025-09-02 19:11:25 -06:00
Leo Vasanko
b324276173
Cleaned up login/logout flows.
2025-09-02 19:08:16 -06:00
Leo Vasanko
c9f9b28bf4
Major refactoring of admin API (permissions, paths)
2025-09-02 18:08:06 -06:00
Leo Vasanko
312d23b79a
Refactor API under /auth/api
2025-09-02 14:32:19 -06:00
Leo Vasanko
cead912ddc
Remove icon, prefer automatic use of /favicon.ico of the host site.
2025-09-02 10:17:40 -06:00
Leo Vasanko
0e7858b15d
Redux
2025-09-01 20:21:20 -06:00
Leo Vasanko
028313eb27
Support WS connections on older browsers.
2025-09-01 20:15:14 -06:00
Leo Vasanko
70551cebb7
Better navigation on admin app.
2025-09-01 20:04:56 -06:00
Leo Vasanko
5a9bee9a1d
Smarter user info
2025-09-01 20:02:52 -06:00
Leo Vasanko
19b5ce6464
Fix previous
2025-09-01 19:58:48 -06:00
Leo Vasanko
fd11cac4bc
Unify user info across admin app and profile view.
2025-09-01 19:56:18 -06:00
Leo Vasanko
357eb2b761
User name editing UI (hopefully fixed)
2025-09-01 18:59:39 -06:00
Leo Vasanko
7036338b33
Use rp-name for frontend branding
2025-09-01 18:48:59 -06:00
Leo Vasanko
6d6c4ee35d
User rename fixes.
2025-09-01 18:20:32 -06:00
Leo Vasanko
37eaffff3f
Renaming of users in registration, profile and admin app.
2025-09-01 18:13:01 -06:00
Leo Vasanko
bc87f76d11
Crude dialog rather than prompt() for input fields. (needs cleanup)
2025-09-01 17:34:45 -06:00
Leo Vasanko
2b03fa74cd
Only allow safe characters in permission IDs
2025-08-30 19:10:00 -06:00
Leo Vasanko
326a7664d3
Formatting
2025-08-30 18:43:27 -06:00
Leo Vasanko
4a0fbd8199
Implement Permission Denied handling.
2025-08-30 18:38:48 -06:00
Leo Vasanko
3e5c0065d5
Remodel reset token handling due to browsers sometimes refusing to set the cookie when opening the link (from another site).
2025-08-30 15:54:17 -06:00
Leo Vasanko
4f094a7016
Fixing cascade.
2025-08-30 14:07:32 -06:00
Leo Vasanko
f3e3679b6d
Actually usable admin panel
2025-08-29 22:38:22 -06:00
Leo Vasanko
4db7f2e9a6
Almost usable admin panel
2025-08-29 21:54:51 -06:00
Leo Vasanko
efdfa77fc9
Basic navigation between auth and user pages.
2025-08-29 20:50:37 -06:00
Leo Vasanko
90f775734a
Fix proxying so that Vite dev mode autoreloads.
2025-08-29 20:49:26 -06:00
Leo Vasanko
7380f09458
Major changes to server startup. Admin page tuning.
2025-08-29 20:41:38 -06:00
Leo Vasanko
e0717f005a
Drafting admin app (frontend)
2025-08-12 13:24:27 -07:00
Leo Vasanko
407994548a
Almost complete org/permission handling. Much cleanup, bootstrap works.
2025-08-07 13:58:12 -06:00
Leo Vasanko
f96668b135
Cleaner error message on aborted Passkey operations.
2025-08-06 12:00:23 -06:00
Leo Vasanko
3c6c9b29f6
Frontend component selection logic simplified.
2025-08-06 11:33:34 -06:00
Leo Vasanko
74ba443d3d
Avoid loading user info twice to show profile.
2025-08-06 10:57:41 -06:00
Leo Vasanko