9 Commits

Include renames

Author	SHA1	Message	Date
Dan MilneandClaude Opus 4.6	3d98261a51	Add dark mode with toggle and localStorage persistence ... Uses Tailwind v4 class-based dark mode with a Stimulus controller for toggling. Respects prefers-color-scheme as default, prevents FOUC with an inline script, and persists the user's choice in localStorage. All views updated with dark: variants for backgrounds, text, borders, badges, buttons, and form inputs. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-03-22 00:37:58 +11:00
Dan Milne	bb5aa2e6d6	Add rails encryption for totp - allow configuration of encryption secrets from env, or derive them from SECRET_KEY_BASE. Don't leak email address via web_authn, rate limit web_authn, escape oidc state value, require password for changing email address, allow settings the hmac secret for token prefix generation	2025-12-31 10:33:56 +11:00
Dan Milne	7796c38c08	Add pairwise SID with a UUIDv4, a significatant upgrade over User.id.to_s. Complete allowing admin to enforce TOTP per user	2025-11-23 11:16:06 +11:00
Dan Milne	fb14ce032f	Strip out more inline javascript code. Encrypt backup codes and treat the backup codes attribute as a json array	2025-11-04 18:46:11 +11:00
Dan Milne	bf104a9983	Fix CSP errors - migrate inline JS to stimulus controllers. Add a URL for applications so users can discover them	2025-11-04 17:06:53 +11:00
Dan Milne	57abc0b804	Add webauthn	2025-11-04 16:20:11 +11:00
Dan Milne	19bfc21f11	Move sessions into their own view for easier management	2025-11-04 15:19:39 +11:00
Dan Milne	5463723455	Increase the thing	2025-10-24 20:48:58 +11:00
Dan Milne	256cbe3a48	User registation working. Sidebar built. Dashboard built. TOTP enable works - TOTP login works	2025-10-23 18:07:27 +11:00