LeoVasanko/paskia
1
0
Fork 0
Code Issues Pull Requests 1 Actions Packages Projects Releases Wiki Activity
197 Commits 2 Branches 57 Tags
ea1ddbbe6f9ee3dc8925e21f995c10eb9f7a3be9
Commit Graph
35 Commits
Author SHA1 Message Date
LeoVasanko ea1ddbbe6f Make dev mode run without static files, only serving assets in production. 2025-12-04 10:15:26 +00:00
LeoVasanko a72349077c Integrate host app to main app (WIP). 2025-12-04 10:00:47 +00:00
LeoVasanko a6591a1fbb Better static files handling on backend, when in dev mode: fetch from vite. 2025-12-04 02:30:02 +00:00
LeoVasanko 768a4391cf Improved profile view layout. 2025-12-03 01:03:25 +00:00
LeoVasanko fd9a5afc1c Implement metadata for RestrictedForward, set by /auth/api/forward endpoint when returning the app. Use this to implement support for time-based reauth requirement. 2025-12-02 23:39:31 +00:00
LeoVasanko 8714fe9319 Vite proxy config simplified. Renaming /auth/restricted to have a trailing slash for better Vite compatibility. 2025-12-02 22:41:12 +00:00
LeoVasanko adbab88c86 Major refactor of frontend source tree such that paths better match where they are served. 2025-12-02 22:09:07 +00:00
LeoVasanko eedbd4aaa4 Moved the restricted-api iframe src to /auth/api/restricted and removed the endpoint of the other restricted app. 2025-12-02 18:34:59 +00:00
LeoVasanko 15916047fa Remove backend access control, now that the profile and admin apps handle that via API. 2025-12-02 18:25:58 +00:00
LeoVasanko a62e8ddf1e Implement restricted-api for JS-driven auth calls, examples added (WIP!). Layout and styling simplified. 2025-12-02 03:10:16 +00:00
LeoVasanko c218ddad61 Centralise all cookie handling to session.py. 2025-10-05 06:48:24 +00:00
LeoVasanko 1ca9e3ef58 Don't redirect non-auth-host /auth/ to auth site but show basic info on current host, and allow logging out. Adds a new host app for this purpose. 2025-10-05 05:55:08 +00:00
LeoVasanko cefb9c3d92 Refactor auth-host redirection middleware to its own module. 
Implement redirection to remove /auth/ from UI URLs when on auth-host.
 2025-10-05 04:49:23 +00:00
LeoVasanko 01bc39a0e8 A major refactoring for more consistent and stricter flows. 
- Force using the dedicated authentication site configured via auth-host
- Stricter host validation
- Using the restricted app consistently for all access control (instead of the old loginview).
 2025-10-05 03:55:11 +00:00
LeoVasanko 0af7aad28c Add host-based authentication, UTC timestamps, session management, and secure cookies; fix styling issues; refactor to remove module; update database schema for sessions and reset tokens. 2025-10-04 06:31:54 +00:00
LeoVasanko 2f1578c4bc Refactor user-profile, restricted access and reset token registration as separate apps so the frontend does not need to guess which context it is running in. 
Support user-navigable URLs at / as well as /auth/, allowing for a dedicated authentication site with pretty URLs.
 2025-10-03 03:42:01 +00:00
LeoVasanko 39ba032450 Provide user info in Remote-* headers. Caddy configuration improved. 2025-09-26 06:12:40 +00:00
LeoVasanko 09b9894407 Cleaned up login/logout flows. 2025-09-03 07:08:16 +00:00
LeoVasanko 4052122d40 Fix url_for query arg on reset link redirect. 2025-09-03 06:32:56 +00:00
LeoVasanko 53f1745ebd Utility module for accessing frontend in backend code. 2025-09-03 04:05:20 +00:00
LeoVasanko 42e0266cd6 Move forward auth under /admin/api/forward 2025-09-03 03:03:39 +00:00
LeoVasanko 5c5da10c8b Moved exception handlers to sub apps. 2025-09-03 02:57:06 +00:00
LeoVasanko 6e5ea9eac0 Refactor API under /auth/api 2025-09-03 02:32:19 +00:00
LeoVasanko 5281432c96 Restructure admin app separate of user api. 2025-09-03 02:04:52 +00:00
LeoVasanko 0e4e4f4cfa Make default permissions use only : as separator. 2025-08-31 06:43:49 +00:00
LeoVasanko c06b7ddf26 Allow specifying multiple permissions. 2025-08-31 04:47:38 +00:00
LeoVasanko c67a83abdc Add permission check on forward-auth and validate. 2025-08-31 04:13:54 +00:00
LeoVasanko 395ecdbd19 Major changes to server startup. Admin page tuning. 2025-08-30 08:41:38 +00:00
LeoVasanko ff9bb1558d Drafting admin app (frontend) 2025-08-13 03:24:27 +00:00
LeoVasanko df377c4a14 Globals restructured to their own module. Origin and RP definition. 2025-08-07 01:23:35 +00:00
LeoVasanko 0578706bdf Initial bootstrap to add admin user 2025-08-07 00:16:37 +00:00
LeoVasanko 5a55417dad Centralised error handling & convenience. 2025-08-06 22:44:57 +00:00
LeoVasanko c8bb2ab12e Checkpoint, fixing reset token handling broken in earlier edits. 2025-08-06 21:55:14 +00:00
LeoVasanko 8b559e0ad9 Allow externally initialized DB for FastAPI app lifespan. 2025-08-05 21:20:32 +00:00
LeoVasanko a4101e708a Separated session management from its FastAPI-dependent parts, creating authsession.py on main level. 
Startup/main/scripts cleanup, now runs with passkey-auth command that takes CLI arguments.
 2025-08-05 21:02:49 +00:00