 Dan Milne
|
93a0edb0a2
|
StandardRB fixes
CI / scan_ruby (push) Has been cancelled
CI / scan_js (push) Has been cancelled
CI / lint (push) Has been cancelled
CI / test (push) Has been cancelled
CI / system-test (push) Has been cancelled
|
2026-01-01 13:29:44 +11:00 |
|
|
Dan Milne
|
3db466f5a2
|
Switch Access / Refresh tokens / Auth Code from bcrypt ( and plain ) to hmac. BCrypt is for low entropy passwords and prevents dictionary attacks - HMAC is suitable for 256-bit random data.
CI / scan_ruby (push) Has been cancelled
CI / scan_js (push) Has been cancelled
CI / lint (push) Has been cancelled
CI / test (push) Has been cancelled
CI / system-test (push) Has been cancelled
|
2025-12-31 15:48:32 +11:00 |
|
|
Dan Milne
|
7c6ae7ab7e
|
Store only HMAC'd Auth codes, rather than plain text auth codes.
|
2025-12-31 15:00:00 +11:00 |
|
|
Dan Milne
|
40815d3576
|
Use SolidQueue in production. Use the find_by_token method, rather than iterating over refresh tokens, as we already fixed for tokens
|
2025-12-31 14:32:34 +11:00 |
|
|
Dan Milne
|
bb5aa2e6d6
|
Add rails encryption for totp - allow configuration of encryption secrets from env, or derive them from SECRET_KEY_BASE. Don't leak email address via web_authn, rate limit web_authn, escape oidc state value, require password for changing email address, allow settings the hmac secret for token prefix generation
|
2025-12-31 10:33:56 +11:00 |
|
|
Dan Milne
|
cc7beba9de
|
PKCE is now default enabled. You can now create public / no-secret apps OIDC apps
|
2025-12-31 09:22:18 +11:00 |
|
|
Dan Milne
|
99c3ac905f
|
Add a token prefix column, generate the token_prefix and the token_digest, removing the plaintext token from use.
|
2025-12-30 09:45:16 +11:00 |
|
|
Dan Milne
|
0761c424c1
|
Fix tests. Remove tests which test rails functionality
CI / scan_ruby (push) Has been cancelled
CI / scan_js (push) Has been cancelled
CI / lint (push) Has been cancelled
CI / test (push) Has been cancelled
CI / system-test (push) Has been cancelled
|
2025-12-30 00:18:19 +11:00 |
|
|
Dan Milne
|
7af8624bf8
|
Handle empty backchannel logout urls
CI / scan_ruby (push) Has been cancelled
CI / scan_js (push) Has been cancelled
CI / lint (push) Has been cancelled
CI / test (push) Has been cancelled
CI / system-test (push) Has been cancelled
|
2025-11-27 19:19:34 +11:00 |
|
|
Dan Milne
|
6be23c2c37
|
Add backchannel logout, per application logout.
CI / scan_ruby (push) Has been cancelled
CI / scan_js (push) Has been cancelled
CI / lint (push) Has been cancelled
CI / test (push) Has been cancelled
CI / system-test (push) Has been cancelled
|
2025-11-27 16:38:27 +11:00 |
|
|
Dan Milne
|
d6029556d3
|
Add OIDC fixes, add prefered_username, add application-user claims
|
2025-11-25 16:29:40 +11:00 |
|
|
Dan Milne
|
7796c38c08
|
Add pairwise SID with a UUIDv4, a significatant upgrade over User.id.to_s. Complete allowing admin to enforce TOTP per user
CI / scan_ruby (push) Has been cancelled
CI / scan_js (push) Has been cancelled
CI / lint (push) Has been cancelled
CI / test (push) Has been cancelled
CI / system-test (push) Has been cancelled
|
2025-11-23 11:16:06 +11:00 |
|
|
Dan Milne
|
e882a4d6d1
|
More complete oidc
CI / scan_ruby (push) Has been cancelled
CI / scan_js (push) Has been cancelled
CI / lint (push) Has been cancelled
CI / test (push) Has been cancelled
CI / system-test (push) Has been cancelled
|
2025-11-18 20:03:03 +11:00 |
|
|
Dan Milne
|
ab0085e9c9
|
More complete oidc
|
2025-11-18 20:02:45 +11:00 |
|
|
Dan Milne
|
4df2eee4d9
|
Bug fix for domain names with empty string instead of null. Form errors and some security fixes
CI / scan_ruby (push) Has been cancelled
CI / scan_js (push) Has been cancelled
CI / lint (push) Has been cancelled
CI / test (push) Has been cancelled
CI / system-test (push) Has been cancelled
|
2025-11-09 12:22:41 +11:00 |
|
|
Dan Milne
|
c92e69fa4a
|
Add PCKE
|
2025-11-09 11:54:45 +11:00 |
|
|
Dan Milne
|
2b15aa2c40
|
Add sentry, set csp reporting API
|
2025-11-04 22:58:32 +11:00 |
|
|
Dan Milne
|
4f5974dd37
|
bah
CI / scan_ruby (push) Has been cancelled
CI / scan_js (push) Has been cancelled
CI / lint (push) Has been cancelled
CI / test (push) Has been cancelled
CI / system-test (push) Has been cancelled
|
2025-11-04 21:33:52 +11:00 |
|
|
Dan Milne
|
5de53f1841
|
bug fix
CI / scan_ruby (push) Has been cancelled
CI / scan_js (push) Has been cancelled
CI / lint (push) Has been cancelled
CI / test (push) Has been cancelled
CI / system-test (push) Has been cancelled
|
2025-11-04 21:21:00 +11:00 |
|
|
Dan Milne
|
4c5ac344bd
|
Bug updating OIDC apps. Update readme
CI / scan_ruby (push) Has been cancelled
CI / scan_js (push) Has been cancelled
CI / lint (push) Has been cancelled
CI / test (push) Has been cancelled
CI / system-test (push) Has been cancelled
|
2025-11-04 20:14:41 +11:00 |
|
|
Dan Milne
|
fb14ce032f
|
Strip out more inline javascript code. Encrypt backup codes and treat the backup codes attribute as a json array
|
2025-11-04 18:46:11 +11:00 |
|
|
Dan Milne
|
bf104a9983
|
Fix CSP errors - migrate inline JS to stimulus controllers. Add a URL for applications so users can discover them
CI / scan_ruby (push) Has been cancelled
CI / scan_js (push) Has been cancelled
CI / lint (push) Has been cancelled
CI / test (push) Has been cancelled
CI / system-test (push) Has been cancelled
|
2025-11-04 17:06:53 +11:00 |
|
|
Dan Milne
|
57abc0b804
|
Add webauthn
CI / scan_ruby (push) Has been cancelled
CI / scan_js (push) Has been cancelled
CI / lint (push) Has been cancelled
CI / test (push) Has been cancelled
CI / system-test (push) Has been cancelled
|
2025-11-04 16:20:11 +11:00 |
|
|
Dan Milne
|
19bfc21f11
|
Move sessions into their own view for easier management
CI / scan_ruby (push) Has been cancelled
CI / scan_js (push) Has been cancelled
CI / lint (push) Has been cancelled
CI / test (push) Has been cancelled
CI / system-test (push) Has been cancelled
|
2025-11-04 15:19:39 +11:00 |
|
|
Dan Milne
|
ef15db77f9
|
Massive refactor. Merge forward_auth into App, remove references to unimplemented OIDC federation and SAML features. Add group and user custom claims. Groups now allocate which apps a user can use
CI / scan_ruby (push) Has been cancelled
CI / scan_js (push) Has been cancelled
CI / lint (push) Has been cancelled
CI / test (push) Has been cancelled
CI / system-test (push) Has been cancelled
|
2025-11-04 13:21:55 +11:00 |
|
|
Dan Milne
|
431e947a4c
|
Some more tests. Fix invitation link and password reset links. After creating their account and setting a password, the user is logged in
CI / scan_ruby (push) Has been cancelled
CI / scan_js (push) Has been cancelled
CI / lint (push) Has been cancelled
CI / test (push) Has been cancelled
CI / system-test (push) Has been cancelled
|
2025-10-26 23:09:38 +11:00 |
|
|
Dan Milne
|
8dd3e60071
|
Add a list_sign_in_at field for users so magick links work
|
2025-10-26 22:40:54 +11:00 |
|
|
Dan Milne
|
88428bfd97
|
Add configuration foward-auth headers
|
2025-10-26 14:41:20 +11:00 |
|
|
Dan Milne
|
5921cf82c2
|
Add invite button and routes for resending invitations
|
2025-10-25 13:49:10 +11:00 |
|
|
Dan Milne
|
5463723455
|
Increase the thing
CI / scan_ruby (push) Has been cancelled
CI / scan_js (push) Has been cancelled
CI / lint (push) Has been cancelled
CI / test (push) Has been cancelled
CI / system-test (push) Has been cancelled
|
2025-10-24 20:48:58 +11:00 |
|
|
Dan Milne
|
0af3dbefed
|
Remember that we concented.
CI / scan_ruby (push) Has been cancelled
CI / scan_js (push) Has been cancelled
CI / lint (push) Has been cancelled
CI / test (push) Has been cancelled
CI / system-test (push) Has been cancelled
|
2025-10-24 17:01:03 +11:00 |
|
|
Dan Milne
|
12e0ef66ed
|
OIDC app creation with encrypted secrets and application roles
CI / scan_ruby (push) Has been cancelled
CI / scan_js (push) Has been cancelled
CI / lint (push) Has been cancelled
CI / test (push) Has been cancelled
CI / system-test (push) Has been cancelled
|
2025-10-24 14:47:24 +11:00 |
|
|
Dan Milne
|
fc9afcd1b7
|
Separate Forward auth into it's own models + controller
CI / scan_ruby (push) Has been cancelled
CI / scan_js (push) Has been cancelled
CI / lint (push) Has been cancelled
CI / test (push) Has been cancelled
CI / system-test (push) Has been cancelled
|
2025-10-24 10:56:27 +11:00 |
|
|
Dan Milne
|
7f075391c1
|
Switch user status to enum
CI / scan_ruby (push) Has been cancelled
CI / scan_js (push) Has been cancelled
CI / lint (push) Has been cancelled
CI / test (push) Has been cancelled
CI / system-test (push) Has been cancelled
|
2025-10-23 20:24:19 +11:00 |
|
|
Dan Milne
|
91573ee2b9
|
Add OIDC capability
|
2025-10-23 20:04:46 +11:00 |
|
|
Dan Milne
|
256cbe3a48
|
User registation working. Sidebar built. Dashboard built. TOTP enable works - TOTP login works
CI / scan_ruby (push) Has been cancelled
CI / scan_js (push) Has been cancelled
CI / lint (push) Has been cancelled
CI / test (push) Has been cancelled
CI / system-test (push) Has been cancelled
|
2025-10-23 18:07:27 +11:00 |
|
|
Dan Milne
|
56f7dd7b3c
|
First crack
CI / scan_ruby (push) Has been cancelled
CI / scan_js (push) Has been cancelled
CI / lint (push) Has been cancelled
CI / test (push) Has been cancelled
CI / system-test (push) Has been cancelled
|
2025-10-23 16:45:00 +11:00 |
|
|
Dan Milne
|
1ff0a95392
|
First commit
CI / scan_ruby (push) Has been cancelled
CI / scan_js (push) Has been cancelled
CI / lint (push) Has been cancelled
CI / test (push) Has been cancelled
CI / system-test (push) Has been cancelled
|
2025-10-23 16:19:56 +11:00 |
|