7db99a7dd5
used zod codemod
2025-11-16 14:18:17 +00:00
6b18a24f9b
@server/private -> #dynamic
2025-10-27 13:46:54 -07:00
0211f75cb6
Access logs working
2025-10-22 17:42:27 -07:00
053acef728
allow using password to log in if security keys are available
2025-07-21 14:28:32 -07:00
9075ecb007
Merge branch 'dev' into feat/internal-user-passkey-support
2025-07-14 17:43:01 -04:00
915ccdc007
server admin enforce 2fa per user
2025-07-13 21:58:37 -07:00
c9f5ffae42
Merge branch 'dev' into feat/internal-user-passkey-support
2025-07-14 07:20:33 +08:00
2a6298e9eb
Admins can enable 2FA
...
Added the feature for admins to force 2FA on accounts. The next time the
user logs in they will have to setup 2FA on their account.
2025-07-08 10:21:24 -04:00
f0a1c10ec5
fix(auth): improve security key login flow.
...
- Fix login to verify password before showing security key prompt
- Add proper 2FA verification flow when deleting security keys
Previously, users with security keys would see the security key prompt
even if they entered an incorrect password. Now the password is verified
first. Additionally, security key deletion now properly handles 2FA
verification when enabled.
2025-07-07 17:48:23 +08:00
5009906385
renamed passkey to security key to stay aligned with the UI and other backend naming.
2025-07-05 21:51:31 +08:00
5130071a60
improved security key management interface, also updated locales
2025-07-05 18:27:04 +08:00
1bf2e23f5d
make username lowercase
2025-06-19 15:41:49 -04:00
f0cb65f65c
dont import db in nextjs
2025-06-05 14:44:34 -04:00
2cca561e51
support postgresql as database option
2025-06-04 12:02:07 -04:00
53be2739bb
successful log in loop poc
2025-04-13 18:29:23 -04:00
fefb07e14c
move schema.ts to module
2025-03-23 17:11:48 -04:00
654ed46a46
Return 401 instead of 400 on bad login
...
Resolves #276
2025-03-04 20:32:48 -05:00
adef93623d
more visual enhancements and use expires instead of max age in cookies
2025-03-02 15:50:03 -05:00
0bd8217d9e
add failed auth logging
2025-01-27 22:43:32 -05:00
5f92b0bbc1
make all emails lowercase closes #89
2025-01-21 19:03:18 -05:00
ab18e15a71
allow controlling cors from config and add cors middleware to traefik
2025-01-13 23:59:10 -05:00
3b4a993704
refactor and reorganize
2025-01-01 21:41:31 -05:00
9732098799
make config class and separate migrations script
2025-01-01 17:50:12 -05:00
f224bfa4ee
reset password flow
2024-12-22 16:59:30 -05:00
0386d81b95
Merge branch 'main' of https://github.com/fosrl/pangolin
2024-12-22 12:04:57 -05:00
1361b47ef7
Remove dangerous logging
2024-12-22 12:03:46 -05:00
ce5df3b0b9
fix issues from test deploy
2024-12-21 21:01:12 -05:00
5bbf32f6a6
improve verify email redirect flow
2024-11-28 00:11:13 -05:00
d7c4bc43a4
set resource session cookie in proxy via param
2024-11-23 23:31:22 -05:00
29b848fd5d
ability to disable email verification requirement
2024-10-25 21:39:18 -04:00
99d6cababa
remove lucia
2024-10-13 17:13:47 -04:00
0e751c6609
save
2024-10-13 14:59:13 -04:00
61fca6a1f6
set public next env vars from config
2024-10-12 21:23:12 -04:00
143a3b756e
Its working!
2024-10-06 22:09:30 -04:00
d9022c5377
move auth utils
2024-10-05 22:31:30 -04:00
7d66a6ff66
added reset password workflow
2024-10-05 17:01:49 -04:00
863f94c8db
check and verify 2fa backup code
2024-10-05 15:45:01 -04:00
e7080c4aa8
added change password endpoint
2024-10-05 15:11:51 -04:00
76eeb335a3
verify email workflow working
2024-10-04 23:14:40 -04:00
57ebc0e525
setup react email and nodemailer
2024-10-03 20:55:54 -04:00
637007e060
finished totp endpoints
2024-10-02 21:55:49 -04:00
44e020784b
added utils for unauth, verify, and response
2024-10-02 20:42:50 -04:00
d1e198fe55
added two factor to login endpoint
2024-10-02 20:19:48 -04:00
1a91dbb89c
organized routes and routes and added rate limiter
2024-10-02 00:04:40 -04:00
Lokowitz
Owen
miloschwartz
Adrian Astles
J. Newing
Adrian Astles