shenlan
149458d97f
chore: remove legacy account migrations ( #404 )
2025-10-05 10:10:21 +08:00
shenlan
3de2dc0962
Enable MFA provisioning via session ( #403 )
2025-10-05 09:33:47 +08:00
shenlan
1413c7f5e7
Merge pull request #402 from svc-design/codex/refactor-multi-factor-authentication-workflow
2025-10-05 08:46:58 +08:00
shenlan
0313411662
Refine MFA TOTP provisioning and verification
2025-10-05 08:45:11 +08:00
shenlan
e3c3780496
Adjust login MFA handling for new users ( #401 )
2025-10-05 08:00:16 +08:00
shenlan
060c11107e
Fix account postgres store email verification handling ( #400 )
2025-10-05 07:37:40 +08:00
Haitao Pan
61971b179e
fix: ensure uuid schema consistency and update homepage runtime config
2025-10-05 07:18:13 +08:00
shenlan
117d904386
Refine UUID schema migration ( #399 )
2025-10-05 07:01:13 +08:00
shenlan
438f18d7ec
Ensure UUID migrations are idempotent ( #398 )
2025-10-04 22:59:56 +08:00
shenlan
4078d4b653
Handle legacy schemas without MFA columns ( #397 )
2025-10-04 22:26:57 +08:00
shenlan
e430a1d155
Make UUID migration idempotent when user_id dropped ( #396 )
2025-10-04 22:13:00 +08:00
shenlan
ea858e27fd
Make UUID migration idempotent ( #395 )
2025-10-04 21:47:46 +08:00
shenlan
9708617710
Align account API proxy paths and add migrations ( #394 )
2025-10-04 21:20:55 +08:00
shenlan
3eba37fbe3
Add MFA management modal with disable support ( #393 )
2025-10-04 20:38:16 +08:00
shenlan
0713cdad84
feat: auto-detect MFA requirements on login ( #392 )
2025-10-04 20:37:07 +08:00
dependabot[bot]
676193c996
chore(deps): bump github.com/gin-contrib/cors from 1.5.0 to 1.6.0 ( #384 )
...
Bumps [github.com/gin-contrib/cors](https://github.com/gin-contrib/cors ) from 1.5.0 to 1.6.0.
- [Release notes](https://github.com/gin-contrib/cors/releases )
- [Changelog](https://github.com/gin-contrib/cors/blob/master/.goreleaser.yaml )
- [Commits](https://github.com/gin-contrib/cors/compare/v1.5.0...v1.6.0 )
---
updated-dependencies:
- dependency-name: github.com/gin-contrib/cors
dependency-version: 1.6.0
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-10-03 12:29:30 +08:00
shenlan
a5869e7400
Add tests for session deletion and healthz endpoint ( #389 )
2025-10-03 12:29:15 +08:00
shenlan
7814bdbd76
Fix Postgres UUID handling in account store ( #388 )
2025-10-03 11:38:22 +08:00
shenlan
54e81569d0
Handle placeholder SMTP configuration ( #387 )
2025-10-03 09:29:59 +08:00
shenlan
087c5c487f
Fix local account service configuration for dev usage ( #386 )
...
* Adjust account service defaults for local development
* Add runtime service configuration for account endpoints
* Switch runtime service config to YAML
2025-10-03 08:44:14 +08:00
shenlan
5c6f03097a
feat: make account service domain configurable ( #385 )
2025-10-03 01:04:55 +08:00
shenlan
639f654be4
Update account service default hostname ( #383 )
2025-10-03 00:34:19 +08:00
shenlan
fe94552560
Add CORS middleware to account service ( #382 )
2025-10-03 00:33:58 +08:00
shenlan
052bc600c0
Guard register highlights rendering ( #381 )
2025-10-03 00:18:17 +08:00
shenlan
7f6c3be316
Add SMTP auto TLS fallback to support non-SSL testing ( #380 )
...
* Enable SMTP auto TLS fallback for testing
* Add HTTP fallback for account auth forms
2025-10-03 00:01:35 +08:00
shenlan
6d19bfb762
Ensure TLS chain is served without reloading certificates ( #379 )
2025-10-02 23:23:03 +08:00
shenlan
7344fdb31e
feat(account): add email verification and password reset ( #378 )
2025-10-02 17:56:30 +08:00
shenlan
83882c6f5a
Support configurable TLS CA bundles for account service ( #377 )
2025-10-02 17:07:19 +08:00
shenlan
dda0c50dec
feat: allow configuring account TLS and default UI endpoints ( #376 )
2025-10-02 16:55:03 +08:00
shenlan
5a2bef2ac2
Update login form defaults and MFA options ( #375 )
2025-10-02 16:45:15 +08:00
Haitao Pan
bda7f53b8e
Merge branch 'release/v0.4.0'
2025-10-02 16:30:15 +08:00
Haitao Pan
e5eced339c
chore(account): update Makefile and TLS config
2025-10-02 16:29:36 +08:00
shenlan
a2076e9970
feat: wire authentication gateway to account service ( #374 )
2025-10-02 16:27:11 +08:00
shenlan
a87d90a81b
Improve account service TLS configuration handling ( #371 )
2025-10-02 15:34:39 +08:00
shenlan
6884baa9e0
Enhance MFA login flows ( #372 )
2025-10-02 15:34:02 +08:00
shenlan
3031be586e
Add MFA onboarding workflow to panel ( #370 )
2025-10-02 15:32:37 +08:00
shenlan
f204180354
Improve account service TLS configuration handling ( #369 )
2025-10-02 15:22:51 +08:00
shenlan
2037143bae
Improve MFA verification tolerance and docs ( #368 )
2025-10-02 15:16:38 +08:00
shenlan
48550554c8
Add return home link to panel header ( #367 )
2025-10-02 14:31:39 +08:00
shenlan
c974f618ae
docs: update account service mfa guidance ( #366 )
2025-10-02 14:06:07 +08:00
shenlan
f7fe6d6261
Add reusable security checks workflow ( #364 )
2025-10-02 11:23:36 +08:00
shenlan
e1f6f6331a
Ensure login form submits via POST ( #365 )
2025-10-02 11:23:11 +08:00
shenlan
a50db44e55
Remove duplicate query parameter helper ( #363 )
2025-10-02 10:17:36 +08:00
shenlan
68eb29d523
Secure auth forms by posting JSON bodies ( #362 )
2025-10-02 09:43:22 +08:00
shenlan
c3cadd64f3
Prevent credential leaks in auth flows ( #361 )
2025-10-02 08:40:59 +08:00
shenlan
a8c0b0ad0b
Add server port and timeout configuration ( #360 )
2025-10-01 21:38:01 +08:00
shenlan
80d9e24c95
Adjust login page copy and disable social auth buttons ( #359 )
2025-10-01 21:08:28 +08:00
shenlan
5d21a9539d
Update register hero copy ( #358 )
2025-10-01 19:46:03 +08:00
shenlan
b6324a20ae
Hide register social auth buttons ( #357 )
2025-10-01 19:27:38 +08:00
Haitao Pan
5dda2e3358
chore: add SQL migration for UUID PK and update Yarn config/lockfile
2025-10-01 18:45:59 +08:00
