 Leo Vasanko
|
f3118b7c1f
|
Cleanup, restore reset link functionality as it were, ruff and removed leftover remoteauth functionality.
|
2025-12-08 23:51:51 +00:00 |
|
|
Leo Vasanko
|
99c60f0e16
|
Massive refactoring of remote auth and related functionality. (WIP)
|
2025-12-08 22:39:57 +00:00 |
|
|
Leo Vasanko
|
a54d872b46
|
Various improvements to remote link login. PoW algorithm tuned. Added base64url and helper modules.
|
2025-12-07 20:12:38 +00:00 |
|
|
Leo Vasanko
|
4bb64863f9
|
Proper PoW, unified verification WS etc
|
2025-12-07 04:12:11 +00:00 |
|
|
Leo Vasanko
|
9485cbd201
|
Drafting autocomplete for the words. Don't check for malformed words
|
2025-12-07 00:37:40 +00:00 |
|
|
Leo Vasanko
|
dd49907c8d
|
Moved remote-link links to same location with reset links, avoiding vite routing issue. Realtime lookup of session when three words have been entered.
|
2025-12-07 00:15:56 +00:00 |
|
|
Leo Vasanko
|
b9e1f76d94
|
Updated Vite config to allow all hosts, and proxy reset links to backend.
|
2025-12-06 21:21:48 +00:00 |
|
|
Leo Vasanko
|
4da1127976
|
Drafting remote auth linking.
|
2025-12-06 16:43:47 +00:00 |
|
|
Leo Vasanko
|
4b16037426
|
Project renamed to Paskia.
|
2025-12-05 13:24:34 +00:00 |
|
|
Leo Vasanko
|
4c34217846
|
Cleanup old hostapp files (finished, working).
|
2025-12-03 22:06:54 -06:00 |
|
|
Leo Vasanko
|
5c72777c2f
|
Missing new component.
|
2025-12-03 22:03:33 -06:00 |
|
|
Leo Vasanko
|
18eed4654f
|
Integrate host app to main app (WIP).
|
2025-12-03 22:00:47 -06:00 |
|
|
Leo Vasanko
|
b373a84065
|
Admin app simplification by using API auth properly. Implemented promise to keep request blocked by permission check while the user authenticates, fixing concurrent requests.
|
2025-12-03 21:19:40 -06:00 |
|
|
Leo Vasanko
|
bc4254ad18
|
Fix view switching of restricted app.
|
2025-12-03 19:46:36 -06:00 |
|
|
Leo Vasanko
|
d541377798
|
Make restricted app use simple fetch that doesn't do API authentication (recursively).
|
2025-12-03 18:20:14 -06:00 |
|
|
Leo Vasanko
|
afbd9606db
|
Revert earlier change to iframe srcdoc, using src instead, because srcdoc was not compatible with all passkey implementations (BitWarden).
|
2025-12-03 18:01:47 -06:00 |
|
|
Leo Vasanko
|
9b73684082
|
Log authentication options on the client.
|
2025-12-03 17:07:44 -06:00 |
|
|
Leo Vasanko
|
9786c2a5a8
|
Improved dialog layout with separate mobile portrait mode.
|
2025-12-03 16:06:32 -06:00 |
|
|
Leo Vasanko
|
3e10e082e2
|
Fix infinitely nested login iframes when the restricted app notices it needs login.
|
2025-12-03 15:56:17 -06:00 |
|
|
Leo Vasanko
|
7a70c933c9
|
Various fixes and cleanup, regressions from prior commits.
|
2025-12-03 15:40:59 -06:00 |
|
|
Leo Vasanko
|
6a7b1a876e
|
Fix syntax error in reset app created by earlier commit.
|
2025-12-03 14:31:13 -06:00 |
|
|
Leo Vasanko
|
9488f69e53
|
Update forward API to return in JSON iframe srcdoc with options injected. (currently broken in dev mode).
|
2025-12-03 13:58:18 -06:00 |
|
|
Leo Vasanko
|
1610869fae
|
Fix fetch timeout rolling while in authentication flow. Now each fetch gets a fresh timeout.
|
2025-12-03 13:35:44 -06:00 |
|
|
Leo Vasanko
|
219dd70665
|
Viewing linked passkeys/sessions (by clicking either one of them).
|
2025-12-03 13:21:52 -06:00 |
|
|
Leo Vasanko
|
4306323c44
|
Consistently use apiJson for fetches, with timeout and proper error handling (less code duplication).
|
2025-12-03 13:00:24 -06:00 |
|
|
Leo Vasanko
|
ceb99de738
|
Improved auth profile UX, consistent transparent-blur dialog background everywhere.
|
2025-12-03 12:30:23 -06:00 |
|
|
Leo Vasanko
|
ad374f5dda
|
Formatting, tidy up, transparent auth dialog background.
|
2025-12-03 11:33:24 -06:00 |
|
|
Leo Vasanko
|
1ffc918a88
|
Improved apiFetch and jsonFetch functions.
|
2025-12-03 11:26:38 -06:00 |
|
|
Leo Vasanko
|
1f75e0a305
|
Make auth/admin apps API calls use apiFetch, a new function that asks for permission by iframe if needed. Implement max-age checks for API authz.verify as well along with a custom exception type that carries metadata.
|
2025-12-03 11:17:02 -06:00 |
|
|
Leo Vasanko
|
2e9895443b
|
Improved session list IP handling. Hovering sessions shows Same IP on matching sessions.
|
2025-12-03 01:32:05 +00:00 |
|
|
Leo Vasanko
|
bd13dbd1a0
|
Implement session termination in admin API, for completeness.
|
2025-12-03 01:20:52 +00:00 |
|
|
Leo Vasanko
|
ca8d65ad25
|
Improved profile view layout.
|
2025-12-03 01:04:07 +00:00 |
|
|
Leo Vasanko
|
70411fa77b
|
Improved profile view layout.
|
2025-12-03 00:52:52 +00:00 |
|
|
Leo Vasanko
|
3967e93c37
|
Fix examples folder serving broken a couple of commits ago.
|
2025-12-03 00:06:32 +00:00 |
|
|
Leo Vasanko
|
10ce0126b0
|
Implement metadata for RestrictedForward, set by /auth/api/forward endpoint when returning the app. Use this to implement support for time-based reauth requirement.
|
2025-12-02 23:39:31 +00:00 |
|
|
Leo Vasanko
|
aed48de38e
|
Vite proxy config simplified. Renaming /auth/restricted to have a trailing slash for better Vite compatibility.
|
2025-12-02 22:41:12 +00:00 |
|
|
Leo Vasanko
|
c83450dace
|
Major refactor of frontend source tree such that paths better match where they are served.
|
2025-12-02 22:09:07 +00:00 |
|
|
Leo Vasanko
|
123a62549b
|
Refactor restricted app paths and naming.
|
2025-12-02 19:10:13 +00:00 |
|
|
Leo Vasanko
|
2a5f06d707
|
Moved the restricted-api iframe src to /auth/api/restricted and removed the endpoint of the other restricted app.
|
2025-12-02 18:34:59 +00:00 |
|
|
Leo Vasanko
|
7ace4dcb4b
|
Fix the back buttons (navigate back if you can but close if it was a new window).
|
2025-12-02 18:13:23 +00:00 |
|
|
Leo Vasanko
|
6f9f4aefc1
|
Implement Forbidden view for API calls, cleanup and better UX.
|
2025-12-02 17:36:37 +00:00 |
|
|
Leo Vasanko
|
a05d4aec81
|
Better error messages from backend, avoid bad toasts, cleanup of session validation.
|
2025-12-02 16:37:27 +00:00 |
|
|
Leo Vasanko
|
77d8e97dc9
|
Update admin app authentication in API mode too, reusing components between it and the main app.
|
2025-12-02 15:42:55 +00:00 |
|
|
Leo Vasanko
|
d1a7a53c19
|
Implemented auth app authentication in API mode (if loading the app itself wasn't blocked). Removed unnecessary toasts when entering restricted pages.
|
2025-12-02 15:25:31 +00:00 |
|
|
Leo Vasanko
|
cb26c61d5f
|
Implement restricted-api for JS-driven auth calls, examples added (WIP!). Layout and styling simplified.
|
2025-12-02 03:10:16 +00:00 |
|
|
Leo Vasanko
|
876215f1c1
|
Reset dialog UX improved.
|
2025-10-04 18:40:46 -06:00 |
|
|
Leo Vasanko
|
59e7e40128
|
Harmonise ProfileView and HostApp.
|
2025-10-04 18:14:17 -06:00 |
|
|
Leo Vasanko
|
a0da799c9e
|
Tuning the host app.
|
2025-10-04 18:06:47 -06:00 |
|
|
Leo Vasanko
|
94efb00e34
|
Don't redirect non-auth-host /auth/ to auth site but show basic info on current host, and allow logging out. Adds a new host app for this purpose.
|
2025-10-04 17:55:08 -06:00 |
|
|
Leo Vasanko
|
29be642dbe
|
Better UX for profile view logout buttons.
|
2025-10-04 16:22:16 -06:00 |
|