Commit Graph

91 Commits

Author SHA1 Message Date
J. Newing
2a6298e9eb Admins can enable 2FA
Added the feature for admins to force 2FA on accounts. The next time the
user logs in they will have to setup 2FA on their account.
2025-07-08 10:21:24 -04:00
miloschwartz
d03f45279c remove server admin from config and add onboarding ui 2025-06-19 22:11:05 -04:00
miloschwartz
1bf2e23f5d make username lowercase 2025-06-19 15:41:49 -04:00
Thijs van Loef
cbca88f76b fix semi colons 2025-06-09 23:52:16 +02:00
miloschwartz
f0cb65f65c dont import db in nextjs 2025-06-05 14:44:34 -04:00
miloschwartz
2cca561e51 support postgresql as database option 2025-06-04 12:02:07 -04:00
miloschwartz
53be2739bb successful log in loop poc 2025-04-13 18:29:23 -04:00
miloschwartz
fefb07e14c move schema.ts to module 2025-03-23 17:11:48 -04:00
Owen
654ed46a46 Return 401 instead of 400 on bad login
Resolves #276
2025-03-04 20:32:48 -05:00
miloschwartz
adef93623d more visual enhancements and use expires instead of max age in cookies 2025-03-02 15:50:03 -05:00
Milo Schwartz
8dd30c88ab fix reset password sql error 2025-02-14 13:12:29 -05:00
Milo Schwartz
3c7025a327 add strict rate limit to endpoints that send email 2025-02-05 22:46:33 -05:00
Milo Schwartz
58a084426b allow logout to fail 2025-02-05 22:00:29 -05:00
Milo Schwartz
60110350aa use smtp user if no no-reply set 2025-01-28 21:26:34 -05:00
Milo Schwartz
a57f0ab360 log password reset token if no smtp to allow reset password 2025-01-28 21:23:19 -05:00
Milo Schwartz
0bd8217d9e add failed auth logging 2025-01-27 22:43:32 -05:00
Milo Schwartz
9f1f2910e4 refactor auth to work cross domain and with http resources closes #100 2025-01-26 14:42:02 -05:00
Milo Schwartz
5f92b0bbc1 make all emails lowercase closes #89 2025-01-21 19:03:18 -05:00
Milo Schwartz
ab18e15a71 allow controlling cors from config and add cors middleware to traefik 2025-01-13 23:59:10 -05:00
Milo Schwartz
235e91294e remove base_url from config (#13)
* add example config dir, logos, and update CONTRIBUTING.md

* update dockerignore

* split base_url into dashboard_url and base_domain

* Remove unessicary ports

* Allow anything for the ip

* Update docker tags

* Complex regex for domains/ips

* update gitignore

---------

Co-authored-by: Owen Schwartz <owen@txv.io>
2025-01-07 22:41:35 -05:00
Milo Schwartz
3b4a993704 refactor and reorganize 2025-01-01 21:41:31 -05:00
Milo Schwartz
9732098799 make config class and separate migrations script 2025-01-01 17:50:12 -05:00
Milo Schwartz
d447de9e8a improve email formatting and invite flow for new users 2024-12-31 18:25:11 -05:00
Milo Schwartz
4cdaa9b588 Merge branch 'main' of https://github.com/fosrl/pangolin 2024-12-25 15:55:50 -05:00
Milo Schwartz
4a1e869e58 setup server admin 2024-12-25 15:54:32 -05:00
Owen Schwartz
29bd88ebdf Merge branch 'main' of https://github.com/fosrl/pangolin 2024-12-24 16:01:29 -05:00
Owen Schwartz
2f328fc719 Add basic transactions 2024-12-24 16:00:02 -05:00
Milo Schwartz
cf75be5a6c disable 2fa and end email notifications 2024-12-24 15:36:55 -05:00
Milo Schwartz
9e50a580a5 enable 2fa flow 2024-12-23 23:59:15 -05:00
Milo Schwartz
af2d78cbfb send confirm password reset email 2024-12-22 17:27:09 -05:00
Milo Schwartz
4b34353354 allow backup code input for totp 2024-12-22 17:20:24 -05:00
Milo Schwartz
f224bfa4ee reset password flow 2024-12-22 16:59:30 -05:00
Owen Schwartz
0386d81b95 Merge branch 'main' of https://github.com/fosrl/pangolin 2024-12-22 12:04:57 -05:00
Owen Schwartz
1361b47ef7 Remove dangerous logging 2024-12-22 12:03:46 -05:00
Milo Schwartz
ce5df3b0b9 fix issues from test deploy 2024-12-21 21:01:12 -05:00
Milo Schwartz
72dc02ff2e access token endpoints and other backend support 2024-12-18 23:14:26 -05:00
Milo Schwartz
998fab6d0a add otp flow to resource auth portal 2024-12-15 17:47:07 -05:00
Milo Schwartz
5bbf32f6a6 improve verify email redirect flow 2024-11-28 00:11:13 -05:00
Milo Schwartz
8178dd1525 set resource session as base domain cookie 2024-11-27 00:07:40 -05:00
Milo Schwartz
203628341f test 2024-11-24 14:53:46 -05:00
Milo Schwartz
4e7fa0f2d9 add logging for verifySession 2024-11-24 14:28:23 -05:00
Milo Schwartz
d7c4bc43a4 set resource session cookie in proxy via param 2024-11-23 23:31:22 -05:00
Milo Schwartz
c565c14aa0 move middlewares out of auth 2024-11-16 22:48:10 -05:00
Milo Schwartz
b1e53ed8d7 set users on resource working 2024-11-15 23:38:08 -05:00
Milo Schwartz
28bae40390 add roles input on resource and make spacing more consistent 2024-11-15 18:25:27 -05:00
Milo Schwartz
ba3505a385 use strict zod objects and hide proto on targets 2024-11-14 00:00:17 -05:00
Milo Schwartz
1a3d7705d9 change user role 2024-11-10 21:19:41 -05:00
Owen Schwartz
03650634ee Websocket working and newt auth working 2024-11-10 17:08:29 -05:00
Owen Schwartz
e5e78ff1bf Basic websocket and auth for newt 2024-11-10 17:08:11 -05:00
Milo Schwartz
231e1d2e2d more user role stuff 2024-11-09 23:59:19 -05:00