Dan Milne
|
7796c38c08
|
Add pairwise SID with a UUIDv4, a significatant upgrade over User.id.to_s. Complete allowing admin to enforce TOTP per user
CI / scan_ruby (push) Has been cancelled
CI / scan_js (push) Has been cancelled
CI / lint (push) Has been cancelled
CI / test (push) Has been cancelled
CI / system-test (push) Has been cancelled
|
2025-11-23 11:16:06 +11:00 |
|
Dan Milne
|
e882a4d6d1
|
More complete oidc
CI / scan_ruby (push) Has been cancelled
CI / scan_js (push) Has been cancelled
CI / lint (push) Has been cancelled
CI / test (push) Has been cancelled
CI / system-test (push) Has been cancelled
|
2025-11-18 20:03:03 +11:00 |
|
Dan Milne
|
1ee3302319
|
Improvements derived from rodauth-oauth
|
2025-11-12 22:17:55 +11:00 |
|
Dan Milne
|
67f28faaca
|
Improve some front end views. More descriptive error condition reporting. Updates to CLINCH_HOST for better WEBAUTHN
|
2025-11-12 16:24:05 +11:00 |
|
Dan Milne
|
11ec753c68
|
Bump up the forward auth token ttl, fix leaking of error data
CI / scan_ruby (push) Has been cancelled
CI / scan_js (push) Has been cancelled
CI / lint (push) Has been cancelled
CI / test (push) Has been cancelled
CI / system-test (push) Has been cancelled
|
2025-11-09 12:27:53 +11:00 |
|
Dan Milne
|
4df2eee4d9
|
Bug fix for domain names with empty string instead of null. Form errors and some security fixes
CI / scan_ruby (push) Has been cancelled
CI / scan_js (push) Has been cancelled
CI / lint (push) Has been cancelled
CI / test (push) Has been cancelled
CI / system-test (push) Has been cancelled
|
2025-11-09 12:22:41 +11:00 |
|
Dan Milne
|
d9f11abbbf
|
Fixes for OIDC and HTML
|
2025-11-09 12:04:26 +11:00 |
|
Dan Milne
|
c92e69fa4a
|
Add PCKE
|
2025-11-09 11:54:45 +11:00 |
|
Dan Milne
|
6049429a41
|
Fix mobile view menu popout. Add an option SENTRY_DSN support, which uses rails event reporting
CI / scan_ruby (push) Has been cancelled
CI / scan_js (push) Has been cancelled
CI / lint (push) Has been cancelled
CI / test (push) Has been cancelled
CI / system-test (push) Has been cancelled
|
2025-11-04 23:16:28 +11:00 |
|
Dan Milne
|
2b15aa2c40
|
Add sentry, set csp reporting API
|
2025-11-04 22:58:32 +11:00 |
|
Dan Milne
|
73b2ae2f02
|
Add some docs
CI / scan_ruby (push) Has been cancelled
CI / scan_js (push) Has been cancelled
CI / lint (push) Has been cancelled
CI / test (push) Has been cancelled
CI / system-test (push) Has been cancelled
|
2025-11-04 21:13:46 +11:00 |
|
Dan Milne
|
fb14ce032f
|
Strip out more inline javascript code. Encrypt backup codes and treat the backup codes attribute as a json array
|
2025-11-04 18:46:11 +11:00 |
|
Dan Milne
|
bf104a9983
|
Fix CSP errors - migrate inline JS to stimulus controllers. Add a URL for applications so users can discover them
CI / scan_ruby (push) Has been cancelled
CI / scan_js (push) Has been cancelled
CI / lint (push) Has been cancelled
CI / test (push) Has been cancelled
CI / system-test (push) Has been cancelled
|
2025-11-04 17:06:53 +11:00 |
|
Dan Milne
|
ec13dd2b60
|
Fix storing passkeys
CI / scan_ruby (push) Has been cancelled
CI / scan_js (push) Has been cancelled
CI / lint (push) Has been cancelled
CI / test (push) Has been cancelled
CI / system-test (push) Has been cancelled
|
2025-11-04 16:32:50 +11:00 |
|
Dan Milne
|
57abc0b804
|
Add webauthn
CI / scan_ruby (push) Has been cancelled
CI / scan_js (push) Has been cancelled
CI / lint (push) Has been cancelled
CI / test (push) Has been cancelled
CI / system-test (push) Has been cancelled
|
2025-11-04 16:20:11 +11:00 |
|
Dan Milne
|
19bfc21f11
|
Move sessions into their own view for easier management
CI / scan_ruby (push) Has been cancelled
CI / scan_js (push) Has been cancelled
CI / lint (push) Has been cancelled
CI / test (push) Has been cancelled
CI / system-test (push) Has been cancelled
|
2025-11-04 15:19:39 +11:00 |
|
Dan Milne
|
ef15db77f9
|
Massive refactor. Merge forward_auth into App, remove references to unimplemented OIDC federation and SAML features. Add group and user custom claims. Groups now allocate which apps a user can use
CI / scan_ruby (push) Has been cancelled
CI / scan_js (push) Has been cancelled
CI / lint (push) Has been cancelled
CI / test (push) Has been cancelled
CI / system-test (push) Has been cancelled
|
2025-11-04 13:21:55 +11:00 |
|
Dan Milne
|
ddcb297c74
|
Add comprhensive csp polices and reporting endpoint. Add environment support require for protecting against rebinding attacks on ip addresses
CI / scan_ruby (push) Has been cancelled
CI / scan_js (push) Has been cancelled
CI / lint (push) Has been cancelled
CI / test (push) Has been cancelled
CI / system-test (push) Has been cancelled
|
2025-10-29 15:37:53 +11:00 |
|
Dan Milne
|
6f7de94623
|
Rate limit the forward_auth controller
CI / scan_ruby (push) Has been cancelled
CI / scan_js (push) Has been cancelled
CI / lint (push) Has been cancelled
CI / test (push) Has been cancelled
CI / system-test (push) Has been cancelled
|
2025-10-29 13:55:36 +11:00 |
|
Dan Milne
|
baa75a3456
|
Use the IPAddr library to detect ipv4 and ipv6 addresses
CI / scan_ruby (push) Has been cancelled
CI / scan_js (push) Has been cancelled
CI / lint (push) Has been cancelled
CI / test (push) Has been cancelled
CI / system-test (push) Has been cancelled
|
2025-10-29 13:47:23 +11:00 |
|
Dan Milne
|
c3205abffa
|
Improve finding the requested host's domain for setting the domain cookie
|
2025-10-29 13:47:23 +11:00 |
|
Dan Milne
|
7074242907
|
Update docs. Implemented a one-time token to work around domain cookies not being immediately return by the browser. Reduce db queries on /api/verify requests.
|
2025-10-28 08:27:19 +11:00 |
|
Dan Milne
|
da6fd5b800
|
More logs
|
2025-10-28 08:27:19 +11:00 |
|
Dan Milne
|
cfab21b130
|
More tests
|
2025-10-28 08:27:19 +11:00 |
|
Dan Milne
|
c80bcafdb7
|
Bug fix
|
2025-10-28 08:27:19 +11:00 |
|
Dan Milne
|
431e947a4c
|
Some more tests. Fix invitation link and password reset links. After creating their account and setting a password, the user is logged in
CI / scan_ruby (push) Has been cancelled
CI / scan_js (push) Has been cancelled
CI / lint (push) Has been cancelled
CI / test (push) Has been cancelled
CI / system-test (push) Has been cancelled
|
2025-10-26 23:09:38 +11:00 |
|
Dan Milne
|
8dd3e60071
|
Add a list_sign_in_at field for users so magick links work
|
2025-10-26 22:40:54 +11:00 |
|
Dan Milne
|
88428bfd97
|
Add configuration foward-auth headers
|
2025-10-26 14:41:20 +11:00 |
|
Dan Milne
|
39757a43dc
|
Add an invite system
CI / scan_ruby (push) Has been cancelled
CI / scan_js (push) Has been cancelled
CI / lint (push) Has been cancelled
CI / test (push) Has been cancelled
CI / system-test (push) Has been cancelled
|
2025-10-24 23:26:07 +11:00 |
|
Dan Milne
|
5463723455
|
Increase the thing
CI / scan_ruby (push) Has been cancelled
CI / scan_js (push) Has been cancelled
CI / lint (push) Has been cancelled
CI / test (push) Has been cancelled
CI / system-test (push) Has been cancelled
|
2025-10-24 20:48:58 +11:00 |
|
Dan Milne
|
e36850f8ba
|
Bug fix
CI / scan_ruby (push) Has been cancelled
CI / scan_js (push) Has been cancelled
CI / lint (push) Has been cancelled
CI / test (push) Has been cancelled
CI / system-test (push) Has been cancelled
|
2025-10-24 17:07:12 +11:00 |
|
Dan Milne
|
0af3dbefed
|
Remember that we concented.
CI / scan_ruby (push) Has been cancelled
CI / scan_js (push) Has been cancelled
CI / lint (push) Has been cancelled
CI / test (push) Has been cancelled
CI / system-test (push) Has been cancelled
|
2025-10-24 17:01:03 +11:00 |
|
Dan Milne
|
d6c24e50df
|
Whoops - add oidc logout
CI / scan_ruby (push) Has been cancelled
CI / scan_js (push) Has been cancelled
CI / lint (push) Has been cancelled
CI / test (push) Has been cancelled
CI / system-test (push) Has been cancelled
|
2025-10-24 16:47:55 +11:00 |
|
Dan Milne
|
8c80343b89
|
Add nonce to the auth codes
CI / scan_ruby (push) Has been cancelled
CI / scan_js (push) Has been cancelled
CI / lint (push) Has been cancelled
CI / test (push) Has been cancelled
CI / system-test (push) Has been cancelled
|
2025-10-24 16:34:38 +11:00 |
|
Dan Milne
|
e3f202f574
|
Fix and cleanup
CI / scan_ruby (push) Has been cancelled
CI / scan_js (push) Has been cancelled
CI / lint (push) Has been cancelled
CI / test (push) Has been cancelled
CI / system-test (push) Has been cancelled
|
2025-10-24 16:17:56 +11:00 |
|
Dan Milne
|
c7f391541a
|
Fix - remove debug
CI / scan_ruby (push) Has been cancelled
CI / scan_js (push) Has been cancelled
CI / lint (push) Has been cancelled
CI / test (push) Has been cancelled
CI / system-test (push) Has been cancelled
|
2025-10-24 16:08:01 +11:00 |
|
Dan Milne
|
8e56210b74
|
More debugging
CI / scan_ruby (push) Has been cancelled
CI / scan_js (push) Has been cancelled
CI / lint (push) Has been cancelled
CI / test (push) Has been cancelled
CI / system-test (push) Has been cancelled
|
2025-10-24 16:01:18 +11:00 |
|
Dan Milne
|
056c69e002
|
More debugging
CI / scan_ruby (push) Has been cancelled
CI / scan_js (push) Has been cancelled
CI / lint (push) Has been cancelled
CI / test (push) Has been cancelled
CI / system-test (push) Has been cancelled
|
2025-10-24 15:54:08 +11:00 |
|
Dan Milne
|
225b6b0bb6
|
Debuging
CI / scan_ruby (push) Has been cancelled
CI / scan_js (push) Has been cancelled
CI / lint (push) Has been cancelled
CI / test (push) Has been cancelled
CI / system-test (push) Has been cancelled
|
2025-10-24 15:47:29 +11:00 |
|
Dan Milne
|
fbda018065
|
Bug fix approving an Application
CI / scan_ruby (push) Has been cancelled
CI / scan_js (push) Has been cancelled
CI / lint (push) Has been cancelled
CI / test (push) Has been cancelled
CI / system-test (push) Has been cancelled
|
2025-10-24 15:41:31 +11:00 |
|
Dan Milne
|
12e0ef66ed
|
OIDC app creation with encrypted secrets and application roles
CI / scan_ruby (push) Has been cancelled
CI / scan_js (push) Has been cancelled
CI / lint (push) Has been cancelled
CI / test (push) Has been cancelled
CI / system-test (push) Has been cancelled
|
2025-10-24 14:47:24 +11:00 |
|
Dan Milne
|
1212e0f22e
|
Allow redirection to 3rd party sites
CI / scan_ruby (push) Has been cancelled
CI / scan_js (push) Has been cancelled
CI / lint (push) Has been cancelled
CI / test (push) Has been cancelled
CI / system-test (push) Has been cancelled
|
2025-10-24 11:52:58 +11:00 |
|
Dan Milne
|
a21b21ace2
|
remove unneeded action
CI / scan_ruby (push) Has been cancelled
CI / scan_js (push) Has been cancelled
CI / lint (push) Has been cancelled
CI / test (push) Has been cancelled
CI / system-test (push) Has been cancelled
|
2025-10-24 11:43:34 +11:00 |
|
Dan Milne
|
ad70841689
|
Pass the redirect url through the forms
CI / scan_ruby (push) Has been cancelled
CI / scan_js (push) Has been cancelled
CI / lint (push) Has been cancelled
CI / test (push) Has been cancelled
CI / system-test (push) Has been cancelled
|
2025-10-24 11:36:11 +11:00 |
|
Dan Milne
|
fc9afcd1b7
|
Separate Forward auth into it's own models + controller
CI / scan_ruby (push) Has been cancelled
CI / scan_js (push) Has been cancelled
CI / lint (push) Has been cancelled
CI / test (push) Has been cancelled
CI / system-test (push) Has been cancelled
|
2025-10-24 10:56:27 +11:00 |
|
Dan Milne
|
ee4af20000
|
Updates
|
2025-10-23 23:55:21 +11:00 |
|
Dan Milne
|
7200a6735f
|
OK - 302 + Location
CI / scan_ruby (push) Has been cancelled
CI / scan_js (push) Has been cancelled
CI / lint (push) Has been cancelled
CI / test (push) Has been cancelled
CI / system-test (push) Has been cancelled
|
2025-10-23 23:52:01 +11:00 |
|
Dan Milne
|
e3e2a565e7
|
Oh - we do use a 401, but with a Location header
|
2025-10-23 22:27:11 +11:00 |
|
Dan Milne
|
19cc425f94
|
Annnd let extract the correct headers so we can redirect
|
2025-10-23 22:16:28 +11:00 |
|
Dan Milne
|
96a9ce2258
|
Redirect when auth fails - I think!
|
2025-10-23 22:07:58 +11:00 |
|