shenlan
dda0dbbcd4
Add crypto billing options and trial subscriptions ( #680 )
2025-11-21 19:20:51 +08:00
shenlan
a1afa0d829
Add PayPal billing and subscription support ( #679 )
2025-11-21 18:55:12 +08:00
Haitao Pan
a1e4cc9146
remove: remove internal/auth/mfa_service.go
...
• Deleted unused mfa_service.go file
• Fixed import in api/api.go for auth package
• Build verified and working
🤖 Generated with [Claude Code](https://claude.com/claude-code )
Co-Authored-By: Claude <noreply@anthropic.com>
2025-11-05 22:25:15 +08:00
Haitao Pan
8edeb75391
feat(auth): implement dual-layer token authentication with config support
...
- Add auth.enable configuration field (default: true)
- Add TokenService initialization in account service
- Implement token exchange endpoint (/api/auth/token/exchange)
- Implement token refresh endpoint (/api/auth/token/refresh)
- Protect routes with JWT authentication middleware
- Update configuration structures for all services
- Support accessSecret with configurable expiry times
- Update token management script to handle all token types
- Validate auth configuration consistency across services
2025-11-05 20:11:23 +08:00
Haitao Pan
34edab39de
fix(account): add timeout and email validation for verification sending
2025-11-04 09:38:15 +08:00
shenlan
f915c46915
Refine registration flow with verification gate ( #623 )
2025-11-01 21:34:35 +08:00
shenlan
a41e8e0b32
Rename register resend endpoint to send ( #622 )
2025-11-01 20:25:37 +08:00
shenlan
6b0e98ee2f
Add verification code resend flow to registration
2025-10-31 19:17:03 +08:00
shenlan
afe6383124
Add desktop config sync endpoint stub ( #597 )
2025-10-28 09:47:30 +08:00
shenlan
6e2f8d7348
Allow combined server and agent mode ( #595 )
2025-10-27 21:02:03 +08:00
shenlan
167632fd80
Improve MFA provisioning resilience ( #590 )
2025-10-27 11:41:05 +08:00
shenlan
fcc80b860f
Align admin settings persistence with public schema ( #512 )
2025-10-13 13:40:00 +08:00
shenlan
3d6afd37e0
Fix admin permission helper usage ( #447 )
2025-10-07 09:41:27 +08:00
shenlan
e7a8b9738a
feat(account): add admin settings matrix management ( #445 )
2025-10-07 09:24:00 +08:00
shenlan
7a0e9526c8
Add admin user metrics endpoint ( #444 )
2025-10-07 08:53:16 +08:00
shenlan
6fbc0b7560
Add role metadata to account and gateway models ( #441 )
...
* Add role metadata to users
* docs: add curl session example and db migration playbook
2025-10-07 08:23:53 +08:00
shenlan
e45a46217d
Set account session cookie during login flows ( #423 )
2025-10-06 15:43:25 +08:00
shenlan
aa08182245
Allow session endpoints to accept cookies ( #422 )
2025-10-06 15:17:35 +08:00
shenlan
d5dfdb01fe
Enable MFA provisioning via session ( #403 )
2025-10-05 09:33:47 +08:00
shenlan
4a552a7abb
Refine MFA TOTP provisioning and verification
2025-10-05 08:45:11 +08:00
shenlan
c2e3adba35
Adjust login MFA handling for new users ( #401 )
2025-10-05 08:00:16 +08:00
shenlan
2a9287e812
Align account API proxy paths and add migrations ( #394 )
2025-10-04 21:20:55 +08:00
shenlan
6d507611a0
Add MFA management modal with disable support ( #393 )
2025-10-04 20:38:16 +08:00
shenlan
b08e8e4ad7
feat: auto-detect MFA requirements on login ( #392 )
2025-10-04 20:37:07 +08:00
shenlan
04eeaff83f
Add tests for session deletion and healthz endpoint ( #389 )
2025-10-03 12:29:15 +08:00
shenlan
4d5f42f991
Handle placeholder SMTP configuration ( #387 )
2025-10-03 09:29:59 +08:00
shenlan
9ceff86df5
feat(account): add email verification and password reset ( #378 )
2025-10-02 17:56:30 +08:00
shenlan
cf6d5a343a
Improve MFA verification tolerance and docs ( #368 )
2025-10-02 15:16:38 +08:00
shenlan
2123809f27
docs: update account service mfa guidance ( #366 )
2025-10-02 14:06:07 +08:00
shenlan
69df239c54
Remove duplicate query parameter helper ( #363 )
2025-10-02 10:17:36 +08:00
shenlan
100b380b2b
Secure auth forms by posting JSON bodies ( #362 )
2025-10-02 09:43:22 +08:00
shenlan
ad71a5f1a9
Prevent credential leaks in auth flows ( #361 )
2025-10-02 08:40:59 +08:00
shenlan
6b3293d133
Align account UUID usage across backend and UI ( #353 )
2025-10-01 17:42:50 +08:00
shenlan
e9f71bd7fe
fix: allow login payload binding for form requests ( #338 )
2025-10-01 10:39:15 +08:00
shenlan
8f8a069481
Connect account registration to Postgres store ( #336 )
2025-10-01 10:05:31 +08:00
shenlan
0c23793986
Implement username-based login and UI updates ( #334 )
2025-10-01 08:24:37 +08:00
shenlan
a93bff0d6c
Implement full user registration flow ( #333 )
2025-10-01 07:52:39 +08:00
shenlan
0d1cda1aaa
Connect register API between UI and account service ( #332 )
2025-10-01 00:09:13 +08:00
shenlan
abf7642701
Use UUID identifiers for account users ( #323 )
2025-09-30 18:42:10 +08:00
shenlan
f8ca5ccb70
feat: scaffold account service and ui
2025-08-19 12:49:05 +08:00