Commit Graph

700 Commits

Author SHA1 Message Date
shenlan
3d6afd37e0 Fix admin permission helper usage (#447) 2025-10-07 09:41:27 +08:00
shenlan
d8a1a0960a fix(account): load migrate-db SQL from file (#446) 2025-10-07 09:25:02 +08:00
shenlan
e7a8b9738a feat(account): add admin settings matrix management (#445) 2025-10-07 09:24:00 +08:00
shenlan
7a0e9526c8 Add admin user metrics endpoint (#444) 2025-10-07 08:53:16 +08:00
shenlan
bd85f0fbfd feat(server): add admin settings matrix management (#440) 2025-10-07 08:48:15 +08:00
shenlan
6fbc0b7560 Add role metadata to account and gateway models (#441)
* Add role metadata to users

* docs: add curl session example and db migration playbook
2025-10-07 08:23:53 +08:00
Haitao Pan
afc71ba98d chore(deps): refresh yarn.lock and registry config after checksum fix 2025-10-07 06:45:48 +08:00
shenlan
ed0fa0252d feat(ui): improve totp mfa provisioning and ux (#438) 2025-10-07 05:47:45 +08:00
shenlan
ef80f1d506 Fix logout page hydration by splitting client component (#432) 2025-10-06 19:08:59 +08:00
shenlan
574a5c14a0 Fix MFA guide typing and optimize QR image (#431) 2025-10-06 18:58:42 +08:00
shenlan
86d91ab141 Refine MFA setup modal guidance (#430) 2025-10-06 18:46:53 +08:00
shenlan
72bd7920b2 Fix login success detection when response omits success flag (#429) 2025-10-06 18:40:38 +08:00
shenlan
8a20ba6b86 Simplify MFA setup modal (#428) 2025-10-06 18:30:26 +08:00
shenlan
76e902b3a2 Fix Linux PostgreSQL install recipe (#427) 2025-10-06 18:23:02 +08:00
shenlan
a34f24656b Update PostgreSQL install to 16 (#426) 2025-10-06 17:47:34 +08:00
root
984f1dafae fix(setup): make NodeSource GPG key import more robust by adding proxy + direct fallback 2025-10-06 17:44:38 +08:00
shenlan
5db239b27e Update README.md 2025-10-06 17:43:48 +08:00
shenlan
c14ee21cc4 Move Ubuntu setup script into scripts directory (#425) 2025-10-06 17:34:04 +08:00
shenlan
d67079ddcc Update PostgreSQL installation workflow (#424) 2025-10-06 17:27:29 +08:00
shenlan
e45a46217d Set account session cookie during login flows (#423) 2025-10-06 15:43:25 +08:00
root
f0840f906d fix(ui/homepage): switch service base URLs to HTTPS for production 2025-10-06 15:22:17 +08:00
shenlan
aa08182245 Allow session endpoints to accept cookies (#422) 2025-10-06 15:17:35 +08:00
shenlan
d2032234ab Refactor svc.plus OpenResty configs (#420) 2025-10-06 14:20:44 +08:00
shenlan
b29a6354fa fix: avoid mixed content on register form (#421) 2025-10-06 14:19:15 +08:00
shenlan
23251c3902 Handle empty database when checking for duplicate users (#419) 2025-10-06 13:28:08 +08:00
Haitao Pan
47264fa0f1 chore(config): add dev domains to allowedOrigins 2025-10-06 13:01:04 +08:00
shenlan
2947c3e7a6 Prevent duplicate usernames before inserting users (#418) 2025-10-06 12:45:31 +08:00
shenlan
7eb0b74b70 Tighten CORS policies for production domains (#417) 2025-10-06 11:30:19 +08:00
shenlan
bfae1b53fc fix: rely on db uniqueness for account usernames (#416) 2025-10-06 10:36:40 +08:00
shenlan
fcab4b5363 fix: coerce register override away from page route (#410) (#415)
Co-authored-by: root <root@global-hub.svc.plus>
2025-10-06 10:09:10 +08:00
shenlan
c2e6f39740 fix: disable register page static caching (#414) 2025-10-06 10:04:30 +08:00
shenlan
169bf35e80 Add pglogical bidirectional replication guide (#413) 2025-10-06 09:53:48 +08:00
shenlan
db61a81880 docs: add register page remediation plan (#412) 2025-10-06 09:52:24 +08:00
shenlan
fbe2f1d565 docs: fix account service endpoint paths (#411) 2025-10-06 09:04:47 +08:00
Haitao Pan
6436701f17 Merge branch 'release/v0.5.0' 2025-10-06 07:56:34 +08:00
shenlan
f0e622ff33 Read default service URLs from runtime config (#409) 2025-10-05 21:50:57 +08:00
Haitao Pan
379ae1a718 Merge branch 'release/v0.5.0' 2025-10-05 20:53:36 +08:00
shenlan
22cfea741b Prioritize default account service base URL (#408) 2025-10-05 20:45:40 +08:00
shenlan
ef8d643922 Fix login translation typings and Next.js config (#406) 2025-10-05 12:15:45 +08:00
shenlan
955064929d docs: add management page planning document (#405) 2025-10-05 11:02:35 +08:00
shenlan
d0fc602434 chore: remove legacy account migrations (#404) 2025-10-05 10:10:21 +08:00
shenlan
d5dfdb01fe Enable MFA provisioning via session (#403) 2025-10-05 09:33:47 +08:00
shenlan
d76f7ed2ef Merge pull request #402 from svc-design/codex/refactor-multi-factor-authentication-workflow 2025-10-05 08:46:58 +08:00
shenlan
4a552a7abb Refine MFA TOTP provisioning and verification 2025-10-05 08:45:11 +08:00
shenlan
c2e3adba35 Adjust login MFA handling for new users (#401) 2025-10-05 08:00:16 +08:00
shenlan
45691adcd2 Fix account postgres store email verification handling (#400) 2025-10-05 07:37:40 +08:00
Haitao Pan
0937249f9e fix: ensure uuid schema consistency and update homepage runtime config 2025-10-05 07:18:13 +08:00
shenlan
6ab10f1e72 Refine UUID schema migration (#399) 2025-10-05 07:01:13 +08:00
shenlan
029aad0fe9 Ensure UUID migrations are idempotent (#398) 2025-10-04 22:59:56 +08:00
shenlan
ffab27656f Handle legacy schemas without MFA columns (#397) 2025-10-04 22:26:57 +08:00