Leo Vasanko 45f9870d0d WebSockets must use origin for finding the host calling them.

2025-10-04 17:16:51 -06:00

..

__init__.py

Separated session management from its FastAPI-dependent parts, creating authsession.py on main level.

2025-08-05 09:02:49 -06:00

__main__.py

Add validation of the CLI specified --auth-host (needs to be within rp-id).

2025-10-04 16:35:55 -06:00

admin.py

A major refactoring for more consistent and stricter flows.

2025-10-04 15:55:43 -06:00

api.py

Fix deletion of session cookie on host logout.

2025-10-04 16:26:36 -06:00

auth_host.py

Correction on restricted path checking (auth-host).

2025-10-04 16:59:05 -06:00

authz.py

Add host-based authentication, UTC timestamps, session management, and secure cookies; fix styling issues; refactor to remove module; update database schema for sessions and reset tokens.

2025-10-03 18:31:54 -06:00

mainapp.py

Refactor auth-host redirection middleware to its own module.

2025-10-04 16:49:23 -06:00

reset.py

Add host-based authentication, UTC timestamps, session management, and secure cookies; fix styling issues; refactor to remove module; update database schema for sessions and reset tokens.

2025-10-03 18:31:54 -06:00

session.py

A major refactoring for more consistent and stricter flows.

2025-10-04 15:55:43 -06:00

ws.py

WebSockets must use origin for finding the host calling them.

2025-10-04 17:16:51 -06:00