Leo Vasanko
07525b47ae
Centralise all cookie handling to session.py.
2025-10-04 18:48:24 -06:00
Leo Vasanko
94efb00e34
Don't redirect non-auth-host /auth/ to auth site but show basic info on current host, and allow logging out. Adds a new host app for this purpose.
2025-10-04 17:55:08 -06:00
Leo Vasanko
a60c1bd5f5
Refactor auth-host redirection middleware to its own module.
...
Implement redirection to remove /auth/ from UI URLs when on auth-host.
2025-10-04 16:49:23 -06:00
Leo Vasanko
bfb11cc20f
A major refactoring for more consistent and stricter flows.
...
- Force using the dedicated authentication site configured via auth-host
- Stricter host validation
- Using the restricted app consistently for all access control (instead of the old loginview).
2025-10-04 15:55:43 -06:00
Leo Vasanko
591ea626bf
Add host-based authentication, UTC timestamps, session management, and secure cookies; fix styling issues; refactor to remove module; update database schema for sessions and reset tokens.
2025-10-03 18:31:54 -06:00
Leo Vasanko
5d8304bbd9
Refactor user-profile, restricted access and reset token registration as separate apps so the frontend does not need to guess which context it is running in.
...
Support user-navigable URLs at / as well as /auth/, allowing for a dedicated authentication site with pretty URLs.
2025-10-02 15:44:48 -06:00
Leo Vasanko
e514ae010d
Provide user info in Remote-* headers. Caddy configuration improved.
2025-09-25 18:12:40 -06:00
Leo Vasanko
b324276173
Cleaned up login/logout flows.
2025-09-02 19:08:16 -06:00
Leo Vasanko
10e55f63b5
Fix url_for query arg on reset link redirect.
2025-09-02 18:32:56 -06:00
Leo Vasanko
3cd6a59b26
Utility module for accessing frontend in backend code.
2025-09-02 16:06:10 -06:00
Leo Vasanko
dd20e7e7f8
Move forward auth under /admin/api/forward
2025-09-02 15:03:39 -06:00
Leo Vasanko
9feac6e9a8
Moved exception handlers to sub apps.
2025-09-02 14:57:06 -06:00
Leo Vasanko
312d23b79a
Refactor API under /auth/api
2025-09-02 14:32:19 -06:00
Leo Vasanko
859cc9ed41
Restructure admin app separate of user api.
2025-09-02 14:04:52 -06:00
Leo Vasanko
d045e1c520
Make default permissions use only : as separator.
2025-08-30 18:43:49 -06:00
Leo Vasanko
16de7b5f1f
Allow specifying multiple permissions.
2025-08-30 16:47:38 -06:00
Leo Vasanko
cb17a332a3
Add permission check on forward-auth and validate.
2025-08-30 16:14:39 -06:00
Leo Vasanko
7380f09458
Major changes to server startup. Admin page tuning.
2025-08-29 20:41:38 -06:00
Leo Vasanko
e0717f005a
Drafting admin app (frontend)
2025-08-12 13:24:27 -07:00
Leo Vasanko
dcca3e3fbd
Globals restructured to their own module. Origin and RP definition.
2025-08-06 13:23:35 -06:00
Leo Vasanko
5a129220aa
Initial bootstrap to add admin user
2025-08-06 12:16:37 -06:00
Leo Vasanko
c9ae53ef79
Centralised error handling & convenience.
2025-08-06 10:44:57 -06:00
Leo Vasanko
cf138d90c5
Checkpoint, fixing reset token handling broken in earlier edits.
2025-08-06 09:55:14 -06:00
Leo Vasanko
4362e8527e
Allow externally initialized DB for FastAPI app lifespan.
2025-08-05 09:20:32 -06:00
Leo Vasanko
7f8f77ae1e
Separated session management from its FastAPI-dependent parts, creating authsession.py on main level.
...
Startup/main/scripts cleanup, now runs with passkey-auth command that takes CLI arguments.
2025-08-05 09:02:49 -06:00
