Commit Graph

41 Commits

Author SHA1 Message Date
236a5d1a77 Fix account module path (#751)
* Fix module path for account service

* Restructure account module path
2025-12-06 10:32:31 +08:00
shenlan
d8d7a136eb Add crypto billing options and trial subscriptions (#680) 2025-11-21 19:20:51 +08:00
shenlan
c00898d712 Add PayPal billing and subscription support (#679) 2025-11-21 18:55:12 +08:00
Haitao Pan
e224576303 remove: remove internal/auth/mfa_service.go
• Deleted unused mfa_service.go file
• Fixed import in api/api.go for auth package
• Build verified and working

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
2025-11-05 22:25:15 +08:00
Haitao Pan
f83fd47c4f feat(auth): implement dual-layer token authentication with config support
- Add auth.enable configuration field (default: true)
- Add TokenService initialization in account service
- Implement token exchange endpoint (/api/auth/token/exchange)
- Implement token refresh endpoint (/api/auth/token/refresh)
- Protect routes with JWT authentication middleware
- Update configuration structures for all services
- Support accessSecret with configurable expiry times
- Update token management script to handle all token types
- Validate auth configuration consistency across services
2025-11-05 20:11:23 +08:00
Haitao Pan
8096601118 fix(account): add timeout and email validation for verification sending 2025-11-04 09:38:15 +08:00
shenlan
9daf5a3378 Refine registration flow with verification gate (#623) 2025-11-01 21:34:35 +08:00
shenlan
32784d74b6 Rename register resend endpoint to send (#622) 2025-11-01 20:25:37 +08:00
shenlan
a34efd7b41 Add verification code resend flow to registration 2025-10-31 19:17:03 +08:00
shenlan
116a484a14 Add desktop config sync endpoint stub (#597) 2025-10-28 09:47:30 +08:00
shenlan
7a4b2f0e00 Allow combined server and agent mode (#595) 2025-10-27 21:02:03 +08:00
shenlan
f2231cfd8f Improve MFA provisioning resilience (#590) 2025-10-27 11:41:05 +08:00
shenlan
3805875f94 Align admin settings persistence with public schema (#512) 2025-10-13 13:40:00 +08:00
shenlan
c4aa4c527e Fix admin permission helper usage (#447) 2025-10-07 09:41:27 +08:00
shenlan
417ceddfc2 feat(account): add admin settings matrix management (#445) 2025-10-07 09:24:00 +08:00
shenlan
4ecdd78272 Add admin user metrics endpoint (#444) 2025-10-07 08:53:16 +08:00
shenlan
98eb6db012 Add role metadata to account and gateway models (#441)
* Add role metadata to users

* docs: add curl session example and db migration playbook
2025-10-07 08:23:53 +08:00
shenlan
a5ac058c15 Set account session cookie during login flows (#423) 2025-10-06 15:43:25 +08:00
shenlan
a6c3f12a8e Allow session endpoints to accept cookies (#422) 2025-10-06 15:17:35 +08:00
shenlan
3de2dc0962 Enable MFA provisioning via session (#403) 2025-10-05 09:33:47 +08:00
shenlan
0313411662 Refine MFA TOTP provisioning and verification 2025-10-05 08:45:11 +08:00
shenlan
e3c3780496 Adjust login MFA handling for new users (#401) 2025-10-05 08:00:16 +08:00
shenlan
9708617710 Align account API proxy paths and add migrations (#394) 2025-10-04 21:20:55 +08:00
shenlan
3eba37fbe3 Add MFA management modal with disable support (#393) 2025-10-04 20:38:16 +08:00
shenlan
0713cdad84 feat: auto-detect MFA requirements on login (#392) 2025-10-04 20:37:07 +08:00
shenlan
a5869e7400 Add tests for session deletion and healthz endpoint (#389) 2025-10-03 12:29:15 +08:00
shenlan
54e81569d0 Handle placeholder SMTP configuration (#387) 2025-10-03 09:29:59 +08:00
shenlan
7344fdb31e feat(account): add email verification and password reset (#378) 2025-10-02 17:56:30 +08:00
shenlan
2037143bae Improve MFA verification tolerance and docs (#368) 2025-10-02 15:16:38 +08:00
shenlan
c974f618ae docs: update account service mfa guidance (#366) 2025-10-02 14:06:07 +08:00
shenlan
a50db44e55 Remove duplicate query parameter helper (#363) 2025-10-02 10:17:36 +08:00
shenlan
68eb29d523 Secure auth forms by posting JSON bodies (#362) 2025-10-02 09:43:22 +08:00
shenlan
c3cadd64f3 Prevent credential leaks in auth flows (#361) 2025-10-02 08:40:59 +08:00
shenlan
144d9c28d6 Align account UUID usage across backend and UI (#353) 2025-10-01 17:42:50 +08:00
shenlan
f89d4b214d fix: allow login payload binding for form requests (#338) 2025-10-01 10:39:15 +08:00
shenlan
137c676383 Connect account registration to Postgres store (#336) 2025-10-01 10:05:31 +08:00
shenlan
88f2ef4721 Implement username-based login and UI updates (#334) 2025-10-01 08:24:37 +08:00
shenlan
068b94234d Implement full user registration flow (#333) 2025-10-01 07:52:39 +08:00
shenlan
33fdafffb2 Connect register API between UI and account service (#332) 2025-10-01 00:09:13 +08:00
shenlan
abf7642701 Use UUID identifiers for account users (#323) 2025-09-30 18:42:10 +08:00
shenlan
f8ca5ccb70 feat: scaffold account service and ui 2025-08-19 12:49:05 +08:00