Leo Vasanko 1f75e0a305 Make auth/admin apps API calls use apiFetch, a new function that asks for permission by iframe if needed. Implement max-age checks for API authz.verify as well along with a custom exception type that carries metadata.

2025-12-03 11:17:02 -06:00

..

__init__.py

Separated session management from its FastAPI-dependent parts, creating authsession.py on main level.

2025-08-05 09:02:49 -06:00

__main__.py

Reload backend only on changes on the backend or frontend-build within, not outside that in the repo.

2025-12-03 10:58:48 -06:00

admin.py

Make auth/admin apps API calls use apiFetch, a new function that asks for permission by iframe if needed. Implement max-age checks for API authz.verify as well along with a custom exception type that carries metadata.

2025-12-03 11:17:02 -06:00

api.py

Make auth/admin apps API calls use apiFetch, a new function that asks for permission by iframe if needed. Implement max-age checks for API authz.verify as well along with a custom exception type that carries metadata.

2025-12-03 11:17:02 -06:00

auth_host.py

Don't redirect non-auth-host /auth/ to auth site but show basic info on current host, and allow logging out. Adds a new host app for this purpose.

2025-10-04 17:55:08 -06:00

authz.py

Make auth/admin apps API calls use apiFetch, a new function that asks for permission by iframe if needed. Implement max-age checks for API authz.verify as well along with a custom exception type that carries metadata.

2025-12-03 11:17:02 -06:00

mainapp.py

Improved profile view layout.

2025-12-03 01:04:07 +00:00

reset.py

Add host-based authentication, UTC timestamps, session management, and secure cookies; fix styling issues; refactor to remove module; update database schema for sessions and reset tokens.

2025-10-03 18:31:54 -06:00

session.py

Centralise all cookie handling to session.py.

2025-10-04 18:48:24 -06:00

user.py

Make auth/admin apps API calls use apiFetch, a new function that asks for permission by iframe if needed. Implement max-age checks for API authz.verify as well along with a custom exception type that carries metadata.

2025-12-03 11:17:02 -06:00

ws.py

Make auth/admin apps API calls use apiFetch, a new function that asks for permission by iframe if needed. Implement max-age checks for API authz.verify as well along with a custom exception type that carries metadata.

2025-12-03 11:17:02 -06:00