Commit Graph

10 Commits

Author SHA1 Message Date
Leo Vasanko
bfb11cc20f A major refactoring for more consistent and stricter flows.
- Force using the dedicated authentication site configured via auth-host
- Stricter host validation
- Using the restricted app consistently for all access control (instead of the old loginview).
2025-10-04 15:55:43 -06:00
Leo Vasanko
591ea626bf Add host-based authentication, UTC timestamps, session management, and secure cookies; fix styling issues; refactor to remove module; update database schema for sessions and reset tokens. 2025-10-03 18:31:54 -06:00
Leo Vasanko
d045e1c520 Make default permissions use only : as separator. 2025-08-30 18:43:49 -06:00
Leo Vasanko
7f8f77ae1e Separated session management from its FastAPI-dependent parts, creating authsession.py on main level.
Startup/main/scripts cleanup, now runs with passkey-auth command that takes CLI arguments.
2025-08-05 09:02:49 -06:00
Leo Vasanko
b58b7d5350 Finish DB cleanup/refactoring. Working now. 2025-08-05 08:26:35 -06:00
Leo Vasanko
c5733eefd6 Database cleanup, base class, separated from FastAPI app. 2025-08-05 07:55:31 -06:00
Leo Vasanko
a987f47988 Fixes to backend API changes. The whole app is mostly functional. 2025-08-01 13:48:38 -06:00
Leo Vasanko
c5e5fe23e3 Major cleanup and refactoring of the backend (frontend not fully updated). 2025-08-01 12:32:27 -06:00
Leo Vasanko
dc0b0f4613 Database reworked simpler, JWTs replaced by sessions table and random tokens. Accessing Add device link is currently broken. 2025-07-14 17:30:16 -06:00
Leo Vasanko
225d7b7542 Refactoring reset and session tokens, currently broken. 2025-07-14 16:10:02 -06:00