55 Commits

Author SHA1 Message Date
Leo Vasanko
074daebd14 Fix matching bug 2025-09-02 18:22:21 -06:00
Leo Vasanko
c9f9b28bf4 Major refactoring of admin API (permissions, paths) 2025-09-02 18:08:06 -06:00
Leo Vasanko
bfc777fb56 Refactoring permissions checks. 2025-09-02 17:28:26 -06:00
Leo Vasanko
3cd6a59b26 Utility module for accessing frontend in backend code. 2025-09-02 16:06:10 -06:00
Leo Vasanko
dd20e7e7f8 Move forward auth under /admin/api/forward 2025-09-02 15:03:39 -06:00
Leo Vasanko
9feac6e9a8 Moved exception handlers to sub apps. 2025-09-02 14:57:06 -06:00
Leo Vasanko
8c07945661 Rename variable to silence linter 2025-09-02 14:45:23 -06:00
Leo Vasanko
312d23b79a Refactor API under /auth/api 2025-09-02 14:32:19 -06:00
Leo Vasanko
859cc9ed41 Restructure admin app separate of user api. 2025-09-02 14:04:52 -06:00
Leo Vasanko
5302cb9d72 Use bun --bun consistently, avoid devmode origin override if specified by args rp-id and/or origin. 2025-09-01 19:47:46 -06:00
Leo Vasanko
7036338b33 Use rp-name for frontend branding 2025-09-01 18:48:59 -06:00
Leo Vasanko
0b285e6ef0 Count registration also as a login. 2025-09-01 18:40:05 -06:00
Leo Vasanko
6854ba62d4 Linter 2025-09-01 18:29:38 -06:00
Leo Vasanko
37eaffff3f Renaming of users in registration, profile and admin app. 2025-09-01 18:13:01 -06:00
Leo Vasanko
2b03fa74cd Only allow safe characters in permission IDs 2025-08-30 19:10:00 -06:00
Leo Vasanko
d045e1c520 Make default permissions use only : as separator. 2025-08-30 18:43:49 -06:00
Leo Vasanko
16de7b5f1f Allow specifying multiple permissions. 2025-08-30 16:47:38 -06:00
Leo Vasanko
cb17a332a3 Add permission check on forward-auth and validate. 2025-08-30 16:14:39 -06:00
Leo Vasanko
3e5c0065d5 Remodel reset token handling due to browsers sometimes refusing to set the cookie when opening the link (from another site). 2025-08-30 15:54:17 -06:00
Leo Vasanko
4f094a7016 Fixing cascade. 2025-08-30 14:07:32 -06:00
Leo Vasanko
f3e3679b6d Actually usable admin panel 2025-08-29 22:38:22 -06:00
Leo Vasanko
4db7f2e9a6 Almost usable admin panel 2025-08-29 21:54:51 -06:00
Leo Vasanko
7380f09458 Major changes to server startup. Admin page tuning. 2025-08-29 20:41:38 -06:00
Leo Vasanko
e0717f005a Drafting admin app (frontend) 2025-08-12 13:24:27 -07:00
Leo Vasanko
02ac4adc77 Support for adding permissions on roles and orgs. 2025-08-12 13:13:35 -07:00
Leo Vasanko
d2a6bfd2a5 Add permissions to orgs and roles (in DB-agnostic API). 2025-08-12 13:21:37 -06:00
Leo Vasanko
6d9f2a967e Cleaner formatting 2025-08-12 13:21:05 -06:00
Leo Vasanko
407994548a Almost complete org/permission handling. Much cleanup, bootstrap works. 2025-08-07 13:58:12 -06:00
Leo Vasanko
2e4ff30bea Users always belong to one Org. Implement a DB function to fetch all data relevant to a session. 2025-08-07 10:42:49 -06:00
Leo Vasanko
2e3ce32779 Bootstrapping cleanup, avoid double operations. 2025-08-07 00:45:12 -06:00
Leo Vasanko
07f5cf84fc Bootstrap cleanup 2025-08-06 23:56:13 -06:00
Leo Vasanko
f050dfb3f2 Bootstrap code cleanup. 2025-08-06 14:39:44 -06:00
Leo Vasanko
dcca3e3fbd Globals restructured to their own module. Origin and RP definition. 2025-08-06 13:23:35 -06:00
Leo Vasanko
5a129220aa Initial bootstrap to add admin user 2025-08-06 12:16:37 -06:00
Leo Vasanko
ba5f2d8bd9 Error handling cleanup for WS too. 2025-08-06 10:53:13 -06:00
Leo Vasanko
c9ae53ef79 Centralised error handling & convenience. 2025-08-06 10:44:57 -06:00
Leo Vasanko
42545c07d2 Add New Passkey and Add New Device flows fixed. 2025-08-06 10:14:04 -06:00
Leo Vasanko
9f423135ed Refactor to not use status: success, but HTTP codes, and renamed the error key to detail to match FastAPI's own. 2025-08-06 10:09:55 -06:00
Leo Vasanko
cf138d90c5 Checkpoint, fixing reset token handling broken in earlier edits. 2025-08-06 09:55:14 -06:00
Leo Vasanko
c42864794a Add organisations on DB 2025-08-05 12:16:02 -06:00
Leo Vasanko
1739764913 Change filename to passkey-auth.sqlite 2025-08-05 09:24:38 -06:00
Leo Vasanko
4362e8527e Allow externally initialized DB for FastAPI app lifespan. 2025-08-05 09:20:32 -06:00
Leo Vasanko
7f8f77ae1e Separated session management from its FastAPI-dependent parts, creating authsession.py on main level.
Startup/main/scripts cleanup, now runs with passkey-auth command that takes CLI arguments.
2025-08-05 09:02:49 -06:00
Leo Vasanko
b58b7d5350 Finish DB cleanup/refactoring. Working now. 2025-08-05 08:26:35 -06:00
Leo Vasanko
c5733eefd6 Database cleanup, base class, separated from FastAPI app. 2025-08-05 07:55:31 -06:00
Leo Vasanko
00693c56fa DB refactor (currently broken) 2025-08-05 06:41:07 -06:00
Leo Vasanko
30ab73d625 Everything works. Minor adjustments on frontend and backend for the new API. 2025-08-02 07:41:42 -06:00
Leo Vasanko
a987f47988 Fixes to backend API changes. The whole app is mostly functional. 2025-08-01 13:48:38 -06:00
Leo Vasanko
c5e5fe23e3 Major cleanup and refactoring of the backend (frontend not fully updated). 2025-08-01 12:32:27 -06:00
Leo Vasanko
0cfa622bf1 Removal of JWT code, cleanup, using User dataclass rather than UserModel in APIs. 2025-07-27 23:44:26 -06:00