45 Commits

Author	SHA1	Message	Date
miloschwartz	ac68dbd545	add my-device and force login	2025-11-25 10:51:53 -05:00
Lokowitz	7db99a7dd5	used zod codemod	2025-11-16 14:18:17 +00:00
Owen	6b18a24f9b	@server/private -> #dynamic	2025-10-27 13:46:54 -07:00
Owen	0211f75cb6	Access logs working	2025-10-22 17:42:27 -07:00
miloschwartz	053acef728	allow using password to log in if security keys are available	2025-07-21 14:28:32 -07:00
Milo Schwartz	9075ecb007	Merge branch 'dev' into feat/internal-user-passkey-support	2025-07-14 17:43:01 -04:00
miloschwartz	915ccdc007	server admin enforce 2fa per user	2025-07-13 21:58:37 -07:00
Adrian Astles	c9f5ffae42	Merge branch 'dev' into feat/internal-user-passkey-support	2025-07-14 07:20:33 +08:00
J. Newing	2a6298e9eb	Admins can enable 2FA ... Added the feature for admins to force 2FA on accounts. The next time the user logs in they will have to setup 2FA on their account.	2025-07-08 10:21:24 -04:00
Adrian Astles	f0a1c10ec5	fix(auth): improve security key login flow. ... - Fix login to verify password before showing security key prompt - Add proper 2FA verification flow when deleting security keys Previously, users with security keys would see the security key prompt even if they entered an incorrect password. Now the password is verified first. Additionally, security key deletion now properly handles 2FA verification when enabled.	2025-07-07 17:48:23 +08:00
Adrian Astles	5009906385	renamed passkey to security key to stay aligned with the UI and other backend naming.	2025-07-05 21:51:31 +08:00
Adrian Astles	5130071a60	improved security key management interface, also updated locales	2025-07-05 18:27:04 +08:00
miloschwartz	1bf2e23f5d	make username lowercase	2025-06-19 15:41:49 -04:00
miloschwartz	f0cb65f65c	dont import db in nextjs	2025-06-05 14:44:34 -04:00
miloschwartz	2cca561e51	support postgresql as database option	2025-06-04 12:02:07 -04:00
miloschwartz	53be2739bb	successful log in loop poc	2025-04-13 18:29:23 -04:00
miloschwartz	fefb07e14c	move schema.ts to module	2025-03-23 17:11:48 -04:00
Owen	654ed46a46	Return 401 instead of 400 on bad login ... Resolves #276	2025-03-04 20:32:48 -05:00
miloschwartz	adef93623d	more visual enhancements and use expires instead of max age in cookies	2025-03-02 15:50:03 -05:00
Milo Schwartz	0bd8217d9e	add failed auth logging	2025-01-27 22:43:32 -05:00
Milo Schwartz	5f92b0bbc1	make all emails lowercase closes #89	2025-01-21 19:03:18 -05:00
Milo Schwartz	ab18e15a71	allow controlling cors from config and add cors middleware to traefik	2025-01-13 23:59:10 -05:00
Milo Schwartz	3b4a993704	refactor and reorganize	2025-01-01 21:41:31 -05:00
Milo Schwartz	9732098799	make config class and separate migrations script	2025-01-01 17:50:12 -05:00
Milo Schwartz	f224bfa4ee	reset password flow	2024-12-22 16:59:30 -05:00
Owen Schwartz	0386d81b95	Merge branch 'main' of https://github.com/fosrl/pangolin	2024-12-22 12:04:57 -05:00
Owen Schwartz	1361b47ef7	Remove dangerous logging	2024-12-22 12:03:46 -05:00
Milo Schwartz	ce5df3b0b9	fix issues from test deploy	2024-12-21 21:01:12 -05:00
Milo Schwartz	5bbf32f6a6	improve verify email redirect flow	2024-11-28 00:11:13 -05:00
Milo Schwartz	d7c4bc43a4	set resource session cookie in proxy via param	2024-11-23 23:31:22 -05:00
Milo Schwartz	29b848fd5d	ability to disable email verification requirement	2024-10-25 21:39:18 -04:00
Milo Schwartz	99d6cababa	remove lucia	2024-10-13 17:13:47 -04:00
Milo Schwartz	0e751c6609	save	2024-10-13 14:59:13 -04:00
Milo Schwartz	61fca6a1f6	set public next env vars from config	2024-10-12 21:23:12 -04:00
Owen Schwartz	143a3b756e	Its working!	2024-10-06 22:09:30 -04:00
Milo Schwartz	d9022c5377	move auth utils	2024-10-05 22:31:30 -04:00
Milo Schwartz	7d66a6ff66	added reset password workflow	2024-10-05 17:01:49 -04:00
Milo Schwartz	863f94c8db	check and verify 2fa backup code	2024-10-05 15:45:01 -04:00
Milo Schwartz	e7080c4aa8	added change password endpoint	2024-10-05 15:11:51 -04:00
Milo Schwartz	76eeb335a3	verify email workflow working	2024-10-04 23:14:40 -04:00
Milo Schwartz	57ebc0e525	setup react email and nodemailer	2024-10-03 20:55:54 -04:00
Milo Schwartz	637007e060	finished totp endpoints	2024-10-02 21:55:49 -04:00
Milo Schwartz	44e020784b	added utils for unauth, verify, and response	2024-10-02 20:42:50 -04:00
Milo Schwartz	d1e198fe55	added two factor to login endpoint	2024-10-02 20:19:48 -04:00
Milo Schwartz	1a91dbb89c	organized routes and routes and added rate limiter	2024-10-02 00:04:40 -04:00