62 Commits

Author SHA1 Message Date
Leo Vasanko
876215f1c1 Reset dialog UX improved. 2025-10-04 18:40:46 -06:00
Leo Vasanko
59e7e40128 Harmonise ProfileView and HostApp. 2025-10-04 18:14:17 -06:00
Leo Vasanko
a0da799c9e Tuning the host app. 2025-10-04 18:06:47 -06:00
Leo Vasanko
94efb00e34 Don't redirect non-auth-host /auth/ to auth site but show basic info on current host, and allow logging out. Adds a new host app for this purpose. 2025-10-04 17:55:08 -06:00
Leo Vasanko
29be642dbe Better UX for profile view logout buttons. 2025-10-04 16:22:16 -06:00
Leo Vasanko
bfb11cc20f A major refactoring for more consistent and stricter flows.
- Force using the dedicated authentication site configured via auth-host
- Stricter host validation
- Using the restricted app consistently for all access control (instead of the old loginview).
2025-10-04 15:55:43 -06:00
Leo Vasanko
389e05730b Refactor user editing endpoints (only auth site) under api/user/ while leaving host-based endpoints at api root. 2025-10-04 08:59:51 -06:00
Leo Vasanko
79b6c50a9c More consistent shared styling between credential and session cards. 2025-10-04 08:32:27 -06:00
Leo Vasanko
591ea626bf Add host-based authentication, UTC timestamps, session management, and secure cookies; fix styling issues; refactor to remove module; update database schema for sessions and reset tokens. 2025-10-03 18:31:54 -06:00
Leo Vasanko
5d8304bbd9 Refactor user-profile, restricted access and reset token registration as separate apps so the frontend does not need to guess which context it is running in.
Support user-navigable URLs at / as well as /auth/, allowing for a dedicated authentication site with pretty URLs.
2025-10-02 15:44:48 -06:00
Leo Vasanko
382341e5ee Make the login/reset/forbidden dialogs look better. 2025-09-30 17:03:51 -06:00
Leo Vasanko
ed7d3ee0fc Admin app: guard rails extended, consistent styling, also share styling with main app. 2025-09-30 16:38:14 -06:00
Leo Vasanko
3dff459068 Remove duplicate message from permission denied page. 2025-09-30 12:56:41 -06:00
Leo Vasanko
89b40cd080 Admin app divided to separate components. 2025-09-30 12:54:18 -06:00
Leo Vasanko
d46d50b91a Massive style redesign, WIP. 2025-09-29 21:02:49 -06:00
Leo Vasanko
d5bc3e773d Clear sessionStorage on logout. 2025-09-28 19:45:37 -06:00
Leo Vasanko
6439437e8b Implement breadcrumb navigation. 2025-09-27 20:47:45 -06:00
Leo Vasanko
b0a1bb72dc Cleaner logout. 2025-09-02 19:11:25 -06:00
Leo Vasanko
b324276173 Cleaned up login/logout flows. 2025-09-02 19:08:16 -06:00
Leo Vasanko
c9f9b28bf4 Major refactoring of admin API (permissions, paths) 2025-09-02 18:08:06 -06:00
Leo Vasanko
312d23b79a Refactor API under /auth/api 2025-09-02 14:32:19 -06:00
Leo Vasanko
cead912ddc Remove icon, prefer automatic use of /favicon.ico of the host site. 2025-09-02 10:17:40 -06:00
Leo Vasanko
0e7858b15d Redux 2025-09-01 20:21:20 -06:00
Leo Vasanko
028313eb27 Support WS connections on older browsers. 2025-09-01 20:15:14 -06:00
Leo Vasanko
70551cebb7 Better navigation on admin app. 2025-09-01 20:04:56 -06:00
Leo Vasanko
5a9bee9a1d Smarter user info 2025-09-01 20:02:52 -06:00
Leo Vasanko
19b5ce6464 Fix previous 2025-09-01 19:58:48 -06:00
Leo Vasanko
fd11cac4bc Unify user info across admin app and profile view. 2025-09-01 19:56:18 -06:00
Leo Vasanko
357eb2b761 User name editing UI (hopefully fixed) 2025-09-01 18:59:39 -06:00
Leo Vasanko
7036338b33 Use rp-name for frontend branding 2025-09-01 18:48:59 -06:00
Leo Vasanko
6d6c4ee35d User rename fixes. 2025-09-01 18:20:32 -06:00
Leo Vasanko
37eaffff3f Renaming of users in registration, profile and admin app. 2025-09-01 18:13:01 -06:00
Leo Vasanko
bc87f76d11 Crude dialog rather than prompt() for input fields. (needs cleanup) 2025-09-01 17:34:45 -06:00
Leo Vasanko
2b03fa74cd Only allow safe characters in permission IDs 2025-08-30 19:10:00 -06:00
Leo Vasanko
326a7664d3 Formatting 2025-08-30 18:43:27 -06:00
Leo Vasanko
4a0fbd8199 Implement Permission Denied handling. 2025-08-30 18:38:48 -06:00
Leo Vasanko
3e5c0065d5 Remodel reset token handling due to browsers sometimes refusing to set the cookie when opening the link (from another site). 2025-08-30 15:54:17 -06:00
Leo Vasanko
4f094a7016 Fixing cascade. 2025-08-30 14:07:32 -06:00
Leo Vasanko
f3e3679b6d Actually usable admin panel 2025-08-29 22:38:22 -06:00
Leo Vasanko
4db7f2e9a6 Almost usable admin panel 2025-08-29 21:54:51 -06:00
Leo Vasanko
efdfa77fc9 Basic navigation between auth and user pages. 2025-08-29 20:50:37 -06:00
Leo Vasanko
90f775734a Fix proxying so that Vite dev mode autoreloads. 2025-08-29 20:49:26 -06:00
Leo Vasanko
7380f09458 Major changes to server startup. Admin page tuning. 2025-08-29 20:41:38 -06:00
Leo Vasanko
e0717f005a Drafting admin app (frontend) 2025-08-12 13:24:27 -07:00
Leo Vasanko
407994548a Almost complete org/permission handling. Much cleanup, bootstrap works. 2025-08-07 13:58:12 -06:00
Leo Vasanko
f96668b135 Cleaner error message on aborted Passkey operations. 2025-08-06 12:00:23 -06:00
Leo Vasanko
3c6c9b29f6 Frontend component selection logic simplified. 2025-08-06 11:33:34 -06:00
Leo Vasanko
74ba443d3d Avoid loading user info twice to show profile. 2025-08-06 10:57:41 -06:00
Leo Vasanko
9f423135ed Refactor to not use status: success, but HTTP codes, and renamed the error key to detail to match FastAPI's own. 2025-08-06 10:09:55 -06:00
Leo Vasanko
cf138d90c5 Checkpoint, fixing reset token handling broken in earlier edits. 2025-08-06 09:55:14 -06:00