LeoVasanko/passkey-auth
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Refactor user editing endpoints (only auth site) under api/user/ while leaving host-based endpoints at api root.

Browse Source
This commit is contained in:
Leo Vasanko
2025-10-04 08:59:51 -06:00
parent 79b6c50a9c
commit 389e05730b
4 changed files with 10 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
frontend/src/components/DeviceLinkView.vue
View File

@@ -7,7 +7,7 @@
</header> </header>
<RegistrationLinkModal <RegistrationLinkModal
inline inline
:endpoint="'/auth/api/create-link'" :endpoint="'/auth/api/user/create-link'"
:user-name="userName" :user-name="userName"
:auto-copy="false" :auto-copy="false"
:prefix-copy-with-user-name="!!userName" :prefix-copy-with-user-name="!!userName"

4
frontend/src/components/ProfileView.vue
View File

@@ -15,7 +15,7 @@
:created-at="authStore.userInfo.user.created_at" :created-at="authStore.userInfo.user.created_at"
:last-seen="authStore.userInfo.user.last_seen" :last-seen="authStore.userInfo.user.last_seen"
:loading="authStore.isLoading" :loading="authStore.isLoading"
update-endpoint="/auth/api/user-display-name" update-endpoint="/auth/api/user/display-name"
@saved="authStore.loadUserInfo()" @saved="authStore.loadUserInfo()"
@edit-name="openNameDialog" @edit-name="openNameDialog"
/> />
@@ -68,7 +68,7 @@
</section> </section>
<RegistrationLinkModal <RegistrationLinkModal
v-if="showRegLink" v-if="showRegLink"
:endpoint="'/auth/api/create-link'" :endpoint="'/auth/api/user/create-link'"
:auto-copy="false" :auto-copy="false"
:prefix-copy-with-user-name="false" :prefix-copy-with-user-name="false"
@close="showRegLink = false" @close="showRegLink = false"

6
frontend/src/stores/auth.js
View File

@@ -127,7 +127,7 @@ export const useAuthStore = defineStore('auth', {
} }
}, },
async deleteCredential(uuid) { async deleteCredential(uuid) {
const response = await fetch(`/auth/api/credential/${uuid}`, {method: 'Delete'}) const response = await fetch(`/auth/api/user/credential/${uuid}`, {method: 'Delete'})
const result = await response.json() const result = await response.json()
if (result.detail) throw new Error(`Server: ${result.detail}`) if (result.detail) throw new Error(`Server: ${result.detail}`)
@@ -135,7 +135,7 @@ export const useAuthStore = defineStore('auth', {
}, },
async terminateSession(sessionId) { async terminateSession(sessionId) {
try { try {
const res = await fetch(`/auth/api/session/${sessionId}`, { method: 'DELETE' }) const res = await fetch(`/auth/api/user/session/${sessionId}`, { method: 'DELETE' })
let payload = null let payload = null
try { try {
payload = await res.json() payload = await res.json()
@@ -180,7 +180,7 @@ export const useAuthStore = defineStore('auth', {
}, },
async logoutEverywhere() { async logoutEverywhere() {
try { try {
const res = await fetch('/auth/api/logout-all', {method: 'POST'}) const res = await fetch('/auth/api/user/logout-all', {method: 'POST'})
if (!res.ok) { if (!res.ok) {
let message = 'Logout failed' let message = 'Logout failed'
try { try {

8
passkey/fastapi/api.py
View File

@@ -370,7 +370,7 @@ async def api_logout(
return {"message": "Logged out successfully"} return {"message": "Logged out successfully"}
@app.post("/logout-all") @app.post("/user/logout-all")
async def api_logout_all( async def api_logout_all(
request: Request, response: Response, auth=Cookie(None, alias="__Host-auth") request: Request, response: Response, auth=Cookie(None, alias="__Host-auth")
): ):
@@ -386,7 +386,7 @@ async def api_logout_all(
return {"message": "Logged out from all hosts"} return {"message": "Logged out from all hosts"}
@app.delete("/session/{session_id}") @app.delete("/user/session/{session_id}")
async def api_delete_session( async def api_delete_session(
request: Request, request: Request,
response: Response, response: Response,
@@ -431,7 +431,7 @@ async def api_set_session(
} }
@app.delete("/credential/{uuid}") @app.delete("/user/credential/{uuid}")
async def api_delete_credential( async def api_delete_credential(
request: Request, uuid: UUID, auth: str = Cookie(None, alias="__Host-auth") request: Request, uuid: UUID, auth: str = Cookie(None, alias="__Host-auth")
): ):
@@ -439,7 +439,7 @@ async def api_delete_credential(
return {"message": "Credential deleted successfully"} return {"message": "Credential deleted successfully"}
@app.post("/create-link") @app.post("/user/create-link")
async def api_create_link(request: Request, auth=Cookie(None, alias="__Host-auth")): async def api_create_link(request: Request, auth=Cookie(None, alias="__Host-auth")):
s = await get_session(auth, host=request.headers.get("host")) s = await get_session(auth, host=request.headers.get("host"))
token = passphrase.generate() token = passphrase.generate()