Commit Graph

689 Commits

Author SHA1 Message Date
shenlan
0701b5a3d4 Fix login success detection when response omits success flag (#429) 2025-10-06 18:40:38 +08:00
shenlan
5a40f8e6f6 Simplify MFA setup modal (#428) 2025-10-06 18:30:26 +08:00
shenlan
b6ad103c3d Fix Linux PostgreSQL install recipe (#427) 2025-10-06 18:23:02 +08:00
shenlan
d60c7d3188 Update PostgreSQL install to 16 (#426) 2025-10-06 17:47:34 +08:00
root
547be6c030 fix(setup): make NodeSource GPG key import more robust by adding proxy + direct fallback 2025-10-06 17:44:38 +08:00
shenlan
39bc1cada3 Update README.md 2025-10-06 17:43:48 +08:00
shenlan
589893a46f Move Ubuntu setup script into scripts directory (#425) 2025-10-06 17:34:04 +08:00
shenlan
39db64b142 Update PostgreSQL installation workflow (#424) 2025-10-06 17:27:29 +08:00
shenlan
a5ac058c15 Set account session cookie during login flows (#423) 2025-10-06 15:43:25 +08:00
root
58f74b16f5 fix(ui/homepage): switch service base URLs to HTTPS for production 2025-10-06 15:22:17 +08:00
shenlan
a6c3f12a8e Allow session endpoints to accept cookies (#422) 2025-10-06 15:17:35 +08:00
shenlan
922085ec3a Refactor svc.plus OpenResty configs (#420) 2025-10-06 14:20:44 +08:00
shenlan
d0d071abf6 fix: avoid mixed content on register form (#421) 2025-10-06 14:19:15 +08:00
shenlan
953a2acf76 Handle empty database when checking for duplicate users (#419) 2025-10-06 13:28:08 +08:00
Haitao Pan
4d1139e2b9 chore(config): add dev domains to allowedOrigins 2025-10-06 13:01:04 +08:00
shenlan
3c2d8f2aea Prevent duplicate usernames before inserting users (#418) 2025-10-06 12:45:31 +08:00
shenlan
0a51d450c2 Tighten CORS policies for production domains (#417) 2025-10-06 11:30:19 +08:00
shenlan
55210f9c51 fix: rely on db uniqueness for account usernames (#416) 2025-10-06 10:36:40 +08:00
shenlan
59198a19d0 fix: coerce register override away from page route (#410) (#415)
Co-authored-by: root <root@global-hub.svc.plus>
2025-10-06 10:09:10 +08:00
shenlan
2615464fa3 fix: disable register page static caching (#414) 2025-10-06 10:04:30 +08:00
shenlan
e1defce6df Add pglogical bidirectional replication guide (#413) 2025-10-06 09:53:48 +08:00
shenlan
f876c75431 docs: add register page remediation plan (#412) 2025-10-06 09:52:24 +08:00
shenlan
6bb2ed6293 docs: fix account service endpoint paths (#411) 2025-10-06 09:04:47 +08:00
Haitao Pan
fad9c9e211 Merge branch 'release/v0.5.0' 2025-10-06 07:56:34 +08:00
shenlan
1078227c86 Read default service URLs from runtime config (#409) 2025-10-05 21:50:57 +08:00
Haitao Pan
7f010009d0 Merge branch 'release/v0.5.0' 2025-10-05 20:53:36 +08:00
shenlan
2880196a51 Prioritize default account service base URL (#408) 2025-10-05 20:45:40 +08:00
shenlan
b0cb75f11b Fix login translation typings and Next.js config (#406) 2025-10-05 12:15:45 +08:00
shenlan
7ddfd136a1 docs: add management page planning document (#405) 2025-10-05 11:02:35 +08:00
shenlan
149458d97f chore: remove legacy account migrations (#404) 2025-10-05 10:10:21 +08:00
shenlan
3de2dc0962 Enable MFA provisioning via session (#403) 2025-10-05 09:33:47 +08:00
shenlan
1413c7f5e7 Merge pull request #402 from svc-design/codex/refactor-multi-factor-authentication-workflow 2025-10-05 08:46:58 +08:00
shenlan
0313411662 Refine MFA TOTP provisioning and verification 2025-10-05 08:45:11 +08:00
shenlan
e3c3780496 Adjust login MFA handling for new users (#401) 2025-10-05 08:00:16 +08:00
shenlan
060c11107e Fix account postgres store email verification handling (#400) 2025-10-05 07:37:40 +08:00
Haitao Pan
61971b179e fix: ensure uuid schema consistency and update homepage runtime config 2025-10-05 07:18:13 +08:00
shenlan
117d904386 Refine UUID schema migration (#399) 2025-10-05 07:01:13 +08:00
shenlan
438f18d7ec Ensure UUID migrations are idempotent (#398) 2025-10-04 22:59:56 +08:00
shenlan
4078d4b653 Handle legacy schemas without MFA columns (#397) 2025-10-04 22:26:57 +08:00
shenlan
e430a1d155 Make UUID migration idempotent when user_id dropped (#396) 2025-10-04 22:13:00 +08:00
shenlan
ea858e27fd Make UUID migration idempotent (#395) 2025-10-04 21:47:46 +08:00
shenlan
9708617710 Align account API proxy paths and add migrations (#394) 2025-10-04 21:20:55 +08:00
shenlan
3eba37fbe3 Add MFA management modal with disable support (#393) 2025-10-04 20:38:16 +08:00
shenlan
0713cdad84 feat: auto-detect MFA requirements on login (#392) 2025-10-04 20:37:07 +08:00
dependabot[bot]
676193c996 chore(deps): bump github.com/gin-contrib/cors from 1.5.0 to 1.6.0 (#384)
Bumps [github.com/gin-contrib/cors](https://github.com/gin-contrib/cors) from 1.5.0 to 1.6.0.
- [Release notes](https://github.com/gin-contrib/cors/releases)
- [Changelog](https://github.com/gin-contrib/cors/blob/master/.goreleaser.yaml)
- [Commits](https://github.com/gin-contrib/cors/compare/v1.5.0...v1.6.0)

---
updated-dependencies:
- dependency-name: github.com/gin-contrib/cors
  dependency-version: 1.6.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-10-03 12:29:30 +08:00
shenlan
a5869e7400 Add tests for session deletion and healthz endpoint (#389) 2025-10-03 12:29:15 +08:00
shenlan
7814bdbd76 Fix Postgres UUID handling in account store (#388) 2025-10-03 11:38:22 +08:00
shenlan
54e81569d0 Handle placeholder SMTP configuration (#387) 2025-10-03 09:29:59 +08:00
shenlan
087c5c487f Fix local account service configuration for dev usage (#386)
* Adjust account service defaults for local development

* Add runtime service configuration for account endpoints

* Switch runtime service config to YAML
2025-10-03 08:44:14 +08:00
shenlan
5c6f03097a feat: make account service domain configurable (#385) 2025-10-03 01:04:55 +08:00