Commit Graph

24 Commits

Author SHA1 Message Date
shenlan
a5ac058c15 Set account session cookie during login flows (#423) 2025-10-06 15:43:25 +08:00
shenlan
a6c3f12a8e Allow session endpoints to accept cookies (#422) 2025-10-06 15:17:35 +08:00
shenlan
3de2dc0962 Enable MFA provisioning via session (#403) 2025-10-05 09:33:47 +08:00
shenlan
0313411662 Refine MFA TOTP provisioning and verification 2025-10-05 08:45:11 +08:00
shenlan
e3c3780496 Adjust login MFA handling for new users (#401) 2025-10-05 08:00:16 +08:00
shenlan
9708617710 Align account API proxy paths and add migrations (#394) 2025-10-04 21:20:55 +08:00
shenlan
3eba37fbe3 Add MFA management modal with disable support (#393) 2025-10-04 20:38:16 +08:00
shenlan
0713cdad84 feat: auto-detect MFA requirements on login (#392) 2025-10-04 20:37:07 +08:00
shenlan
a5869e7400 Add tests for session deletion and healthz endpoint (#389) 2025-10-03 12:29:15 +08:00
shenlan
54e81569d0 Handle placeholder SMTP configuration (#387) 2025-10-03 09:29:59 +08:00
shenlan
7344fdb31e feat(account): add email verification and password reset (#378) 2025-10-02 17:56:30 +08:00
shenlan
2037143bae Improve MFA verification tolerance and docs (#368) 2025-10-02 15:16:38 +08:00
shenlan
c974f618ae docs: update account service mfa guidance (#366) 2025-10-02 14:06:07 +08:00
shenlan
a50db44e55 Remove duplicate query parameter helper (#363) 2025-10-02 10:17:36 +08:00
shenlan
68eb29d523 Secure auth forms by posting JSON bodies (#362) 2025-10-02 09:43:22 +08:00
shenlan
c3cadd64f3 Prevent credential leaks in auth flows (#361) 2025-10-02 08:40:59 +08:00
shenlan
144d9c28d6 Align account UUID usage across backend and UI (#353) 2025-10-01 17:42:50 +08:00
shenlan
f89d4b214d fix: allow login payload binding for form requests (#338) 2025-10-01 10:39:15 +08:00
shenlan
137c676383 Connect account registration to Postgres store (#336) 2025-10-01 10:05:31 +08:00
shenlan
88f2ef4721 Implement username-based login and UI updates (#334) 2025-10-01 08:24:37 +08:00
shenlan
068b94234d Implement full user registration flow (#333) 2025-10-01 07:52:39 +08:00
shenlan
33fdafffb2 Connect register API between UI and account service (#332) 2025-10-01 00:09:13 +08:00
shenlan
abf7642701 Use UUID identifiers for account users (#323) 2025-09-30 18:42:10 +08:00
shenlan
f8ca5ccb70 feat: scaffold account service and ui 2025-08-19 12:49:05 +08:00