LeoVasanko
575d3cb1fb
Deny creating sessions for hosts other than rp-id subdomains.
2025-10-05 05:26:03 +00:00
LeoVasanko
01bc39a0e8
A major refactoring for more consistent and stricter flows.
...
- Force using the dedicated authentication site configured via auth-host
- Stricter host validation
- Using the restricted app consistently for all access control (instead of the old loginview).
2025-10-05 03:55:11 +00:00
LeoVasanko
0af7aad28c
Add host-based authentication, UTC timestamps, session management, and secure cookies; fix styling issues; refactor to remove module; update database schema for sessions and reset tokens.
2025-10-04 06:31:54 +00:00
LeoVasanko
df377c4a14
Globals restructured to their own module. Origin and RP definition.
2025-08-07 01:23:35 +00:00
LeoVasanko
c8bb2ab12e
Checkpoint, fixing reset token handling broken in earlier edits.
2025-08-06 21:55:14 +00:00
LeoVasanko
a4101e708a
Separated session management from its FastAPI-dependent parts, creating authsession.py on main level.
...
Startup/main/scripts cleanup, now runs with passkey-auth command that takes CLI arguments.
2025-08-05 21:02:49 +00:00
LeoVasanko