Commit Graph

243 Commits

Author SHA1 Message Date
shenlan
483cd593b6 Use local QR rendering for MFA setup (#458) 2025-10-07 18:56:26 +08:00
shenlan
3d447ae84d feat: pin MFA issuer and label to user context (#457) 2025-10-07 17:00:29 +08:00
shenlan
f692ad78ad feat: document multi-tenant rbac and harden panel access (#455) 2025-10-07 16:44:02 +08:00
shenlan
aed03592cb fix: allow session cookies over http in dev (#454) 2025-10-07 16:38:57 +08:00
shenlan
b3bfa0c15b Move management console link into user center section (#453) 2025-10-07 16:34:23 +08:00
shenlan
cb2c9716dc feat(ui): add management dashboard layout and tests (#450) 2025-10-07 10:18:36 +08:00
shenlan
fcc58b091a chore(panel): tighten layout spacing (#448) 2025-10-07 09:57:06 +08:00
shenlan
6fbc0b7560 Add role metadata to account and gateway models (#441)
* Add role metadata to users

* docs: add curl session example and db migration playbook
2025-10-07 08:23:53 +08:00
Haitao Pan
afc71ba98d chore(deps): refresh yarn.lock and registry config after checksum fix 2025-10-07 06:45:48 +08:00
shenlan
ed0fa0252d feat(ui): improve totp mfa provisioning and ux (#438) 2025-10-07 05:47:45 +08:00
shenlan
ef80f1d506 Fix logout page hydration by splitting client component (#432) 2025-10-06 19:08:59 +08:00
shenlan
574a5c14a0 Fix MFA guide typing and optimize QR image (#431) 2025-10-06 18:58:42 +08:00
shenlan
86d91ab141 Refine MFA setup modal guidance (#430) 2025-10-06 18:46:53 +08:00
shenlan
72bd7920b2 Fix login success detection when response omits success flag (#429) 2025-10-06 18:40:38 +08:00
shenlan
8a20ba6b86 Simplify MFA setup modal (#428) 2025-10-06 18:30:26 +08:00
root
f0840f906d fix(ui/homepage): switch service base URLs to HTTPS for production 2025-10-06 15:22:17 +08:00
shenlan
b29a6354fa fix: avoid mixed content on register form (#421) 2025-10-06 14:19:15 +08:00
shenlan
fcab4b5363 fix: coerce register override away from page route (#410) (#415)
Co-authored-by: root <root@global-hub.svc.plus>
2025-10-06 10:09:10 +08:00
shenlan
c2e6f39740 fix: disable register page static caching (#414) 2025-10-06 10:04:30 +08:00
Haitao Pan
6436701f17 Merge branch 'release/v0.5.0' 2025-10-06 07:56:34 +08:00
shenlan
f0e622ff33 Read default service URLs from runtime config (#409) 2025-10-05 21:50:57 +08:00
Haitao Pan
379ae1a718 Merge branch 'release/v0.5.0' 2025-10-05 20:53:36 +08:00
shenlan
22cfea741b Prioritize default account service base URL (#408) 2025-10-05 20:45:40 +08:00
shenlan
ef8d643922 Fix login translation typings and Next.js config (#406) 2025-10-05 12:15:45 +08:00
shenlan
d5dfdb01fe Enable MFA provisioning via session (#403) 2025-10-05 09:33:47 +08:00
shenlan
4a552a7abb Refine MFA TOTP provisioning and verification 2025-10-05 08:45:11 +08:00
Haitao Pan
0937249f9e fix: ensure uuid schema consistency and update homepage runtime config 2025-10-05 07:18:13 +08:00
shenlan
2a9287e812 Align account API proxy paths and add migrations (#394) 2025-10-04 21:20:55 +08:00
shenlan
6d507611a0 Add MFA management modal with disable support (#393) 2025-10-04 20:38:16 +08:00
shenlan
b08e8e4ad7 feat: auto-detect MFA requirements on login (#392) 2025-10-04 20:37:07 +08:00
shenlan
888e3a6ae5 Fix local account service configuration for dev usage (#386)
* Adjust account service defaults for local development

* Add runtime service configuration for account endpoints

* Switch runtime service config to YAML
2025-10-03 08:44:14 +08:00
shenlan
19b1034518 feat: make account service domain configurable (#385) 2025-10-03 01:04:55 +08:00
shenlan
1567bc327d Update account service default hostname (#383) 2025-10-03 00:34:19 +08:00
shenlan
3f9b89ace5 Guard register highlights rendering (#381) 2025-10-03 00:18:17 +08:00
shenlan
e61b3f5028 Add SMTP auto TLS fallback to support non-SSL testing (#380)
* Enable SMTP auto TLS fallback for testing

* Add HTTP fallback for account auth forms
2025-10-03 00:01:35 +08:00
shenlan
56bd9d95bf feat: allow configuring account TLS and default UI endpoints (#376) 2025-10-02 16:55:03 +08:00
shenlan
4b542a23a4 Update login form defaults and MFA options (#375) 2025-10-02 16:45:15 +08:00
shenlan
1f7c231255 feat: wire authentication gateway to account service (#374) 2025-10-02 16:27:11 +08:00
shenlan
e62de31887 Enhance MFA login flows (#372) 2025-10-02 15:34:02 +08:00
shenlan
d7c995ad51 Add MFA onboarding workflow to panel (#370) 2025-10-02 15:32:37 +08:00
shenlan
7b82dce20a Add return home link to panel header (#367) 2025-10-02 14:31:39 +08:00
shenlan
2123809f27 docs: update account service mfa guidance (#366) 2025-10-02 14:06:07 +08:00
shenlan
d869618a4a Ensure login form submits via POST (#365) 2025-10-02 11:23:11 +08:00
shenlan
100b380b2b Secure auth forms by posting JSON bodies (#362) 2025-10-02 09:43:22 +08:00
shenlan
ad71a5f1a9 Prevent credential leaks in auth flows (#361) 2025-10-02 08:40:59 +08:00
shenlan
97168a00a7 Adjust login page copy and disable social auth buttons (#359) 2025-10-01 21:08:28 +08:00
shenlan
9c2d6ffe8b Update register hero copy (#358) 2025-10-01 19:46:03 +08:00
shenlan
a4a87a9b3c Hide register social auth buttons (#357) 2025-10-01 19:27:38 +08:00
Haitao Pan
fedc64660a chore: add SQL migration for UUID PK and update Yarn config/lockfile 2025-10-01 18:45:59 +08:00
shenlan
056af06919 Mark login, register, and panel features as stable (#356) 2025-10-01 18:42:41 +08:00