223429d51c
Add renew=0 query arg on validate, useful when only a permission check is required.
v1.5.6
LeoVasanko2026-08-11 01:46:56 +00:00
2456730f70
Check max-age only after checking permissions: if neither is passing, we want a 403 error; simply authenticating again won't fix it so don't bother reauth flow. After forbidden flow e.g. account change we are already good with max-age too.
v1.5.5
LeoVasanko2026-08-11 00:56:01 +00:00
6f5287e070
Avoid clearing session.user_agent if a validation request lack this header. Backend-initiated session validations may not have the data.
LeoVasanko2026-08-10 14:09:42 +00:00
4b156b712c
Proper handling of auth site runtime change done via web interface, making the change immediately effective. Kept in origins list that is still also visible on the same dialog, where it can be removed if needed.
LeoVasanko2026-08-09 23:00:22 +00:00
df8a7c0026
Cleanup of admin user panel where incorrect toast messages were issued after changes.
LeoVasanko2026-08-09 21:45:23 +00:00
9b28250391
Upgrade to kanta 0.4.0: - Make use of its new features and cleanup our interfacing and init/shutdown processes and migrations - Clean up circular deps, simplify app init - Add specific pytest for CLI main to cover the changes
v1.5.3
LeoVasanko2026-06-13 21:59:18 +00:00
b9aec6bb58
Remove built-in database, replace with kanta package. No disk format changes.
v1.5.2
LeoVasanko2026-06-12 19:39:30 +00:00
816c7a681e
Update E2E tests for new database folder.
LeoVasanko2026-05-22 01:40:09 +00:00
d31c09084e
Make rpid.paskiadb a folder containing the database and the files in one. Migrates existing old format rpid.paskiadb file to main.db.
LeoVasanko2026-05-22 01:22:35 +00:00
cc938dd306
Fix a call to loadOrgs when renaming a role, missed in earlier refactoring where we use loadAdminData() for refreshing.
LeoVasanko2026-05-22 00:31:06 +00:00
36db1e7e56
Fix showing of admin reset link also in devserver where the logging configuration was eating the message.
LeoVasanko2026-05-22 00:22:04 +00:00
232d0e1ae0
Added configurable timeout settings to paskia-js, used in our frontend as well. The default fetch timeout has been changed to 10s from prior 1s, but we maintain 1s for auth endpoints in internal use.
LeoVasanko2026-04-29 20:23:38 +00:00
e97a2b3291
Improved color compatibility across terminals that may have very different ideas of yellow shades.
LeoVasanko2026-04-29 16:23:34 +00:00
cde709e252
Print original METHOD /path on auth/api/forward access log entries. Previously the method was not printed, and nothing was printed for 401 without a session.
v1.3.7
LeoVasanko2026-04-29 15:47:37 +00:00
72d76df35d
Log session id from handlers on selected auth routes. Adds request.state.log_extra for handlers to print access log extra.
v1.3.6
LeoVasanko2026-04-29 03:02:30 +00:00
c1b2bcf76c
Correct alphabetical sort of names in Org Admin panel. Supports Last, First and First Last + variatioons.
v1.3.2
LeoVasanko2026-02-19 20:54:52 +00:00
1806bcab5c
A bit more color for light theme; cleaner user badges in admin app.
LeoVasanko2026-02-19 20:40:21 +00:00
be177cbafc
Add default value for a(ction) field in change records to keep support for very old versions.
LeoVasanko2026-02-19 20:16:16 +00:00
3cb24bfee9
Refactor to separate admin app modules to subapps, required trailing slashes and plural changes on some of the URLs.
LeoVasanko2026-02-19 19:49:13 +00:00
3f51d06f13
Admin Server Options panel added for configuring rp-name, auth-host and origins.
LeoVasanko2026-02-19 18:53:53 +00:00
727625ef4f
Avoid storing IP and User Agent on OpenID Connect token renewals; preserves the user's information from authentication.
v1.2.4
LeoVasanko2026-02-19 16:34:44 +00:00
d64e63527b
CLI main and RuntimeConfig cleanup. Added a session_ctx wrapper function for easier access and avoiding hostutil import in db.
LeoVasanko2026-02-19 14:24:16 +00:00
733439b446
Logging cleanup, better color compatibility for Mac Terminal and consistent across DB and FastAPI access logs.
LeoVasanko2026-02-19 14:19:54 +00:00
4e6f63e9ef
Fix auth-host being added to origins even when no origins were wanted.
v1.2.2
LeoVasanko2026-02-19 01:00:13 +00:00
d431c75297
Fix request header removal that was causing zstd compressed response when we wanted plain text.
v1.2.1
LeoVasanko2026-02-19 00:51:11 +00:00
7958b6f365
Migrations cleanup by using a MigrationCtx object for meta.
LeoVasanko2026-02-19 00:08:38 +00:00
b3cb540098
Implement database file locking for extra safety.
LeoVasanko2026-02-19 00:01:49 +00:00
22ba7231b1
Implement read-only database load at startup for CLI to get its settings. Full opening only when server has started.
LeoVasanko2026-02-18 23:46:18 +00:00
f26ac8f33b
Simplified My Profile authentication flows, fixed some UX issues with reauth cancelled/accepted leading to incorrect states.
LeoVasanko2026-02-18 19:04:02 +00:00
880ced3b8c
Always load user's theme from API if available, and update the localStorage cache. Previously in various situations the old cached value was being used instead, leading to inconsistent theming or wrong themeselector readout.
LeoVasanko2026-02-18 18:35:41 +00:00
af80b5eefc
Make ResetApp Registration layout match the other dialog apps (centered).
LeoVasanko2026-02-18 18:01:17 +00:00
39000ef831
Remove PASKIA_SITE_URL env, use PASKIA_VITE_URL instead, moving the correct site URL determination to paskia CLI directly. This resolves devserver issues where VITE URL was reported as the external site URL instead of configured auth-host or origins. Main CLI still simplified. Bump deps versions and cleanup pyproject.toml.
LeoVasanko2026-02-18 17:21:03 +00:00
49119fac81
Fix HostProfile user properties access.
LeoVasanko2026-02-18 03:47:08 +00:00
LeoVasanko