Commit Graph

658 Commits

Author SHA1 Message Date
shenlan
d76f7ed2ef Merge pull request #402 from svc-design/codex/refactor-multi-factor-authentication-workflow 2025-10-05 08:46:58 +08:00
shenlan
4a552a7abb Refine MFA TOTP provisioning and verification 2025-10-05 08:45:11 +08:00
shenlan
c2e3adba35 Adjust login MFA handling for new users (#401) 2025-10-05 08:00:16 +08:00
shenlan
45691adcd2 Fix account postgres store email verification handling (#400) 2025-10-05 07:37:40 +08:00
Haitao Pan
0937249f9e fix: ensure uuid schema consistency and update homepage runtime config 2025-10-05 07:18:13 +08:00
shenlan
6ab10f1e72 Refine UUID schema migration (#399) 2025-10-05 07:01:13 +08:00
shenlan
029aad0fe9 Ensure UUID migrations are idempotent (#398) 2025-10-04 22:59:56 +08:00
shenlan
ffab27656f Handle legacy schemas without MFA columns (#397) 2025-10-04 22:26:57 +08:00
shenlan
bb81a897b2 Make UUID migration idempotent when user_id dropped (#396) 2025-10-04 22:13:00 +08:00
shenlan
88cd7283eb Make UUID migration idempotent (#395) 2025-10-04 21:47:46 +08:00
shenlan
2a9287e812 Align account API proxy paths and add migrations (#394) 2025-10-04 21:20:55 +08:00
shenlan
6d507611a0 Add MFA management modal with disable support (#393) 2025-10-04 20:38:16 +08:00
shenlan
b08e8e4ad7 feat: auto-detect MFA requirements on login (#392) 2025-10-04 20:37:07 +08:00
dependabot[bot]
08b37b4f3f chore(deps): bump github.com/gin-contrib/cors from 1.5.0 to 1.6.0 (#384)
Bumps [github.com/gin-contrib/cors](https://github.com/gin-contrib/cors) from 1.5.0 to 1.6.0.
- [Release notes](https://github.com/gin-contrib/cors/releases)
- [Changelog](https://github.com/gin-contrib/cors/blob/master/.goreleaser.yaml)
- [Commits](https://github.com/gin-contrib/cors/compare/v1.5.0...v1.6.0)

---
updated-dependencies:
- dependency-name: github.com/gin-contrib/cors
  dependency-version: 1.6.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-10-03 12:29:30 +08:00
shenlan
04eeaff83f Add tests for session deletion and healthz endpoint (#389) 2025-10-03 12:29:15 +08:00
shenlan
0a18ea1b77 Fix Postgres UUID handling in account store (#388) 2025-10-03 11:38:22 +08:00
shenlan
4d5f42f991 Handle placeholder SMTP configuration (#387) 2025-10-03 09:29:59 +08:00
shenlan
888e3a6ae5 Fix local account service configuration for dev usage (#386)
* Adjust account service defaults for local development

* Add runtime service configuration for account endpoints

* Switch runtime service config to YAML
2025-10-03 08:44:14 +08:00
shenlan
19b1034518 feat: make account service domain configurable (#385) 2025-10-03 01:04:55 +08:00
shenlan
1567bc327d Update account service default hostname (#383) 2025-10-03 00:34:19 +08:00
shenlan
d7bd4147ae Add CORS middleware to account service (#382) 2025-10-03 00:33:58 +08:00
shenlan
3f9b89ace5 Guard register highlights rendering (#381) 2025-10-03 00:18:17 +08:00
shenlan
e61b3f5028 Add SMTP auto TLS fallback to support non-SSL testing (#380)
* Enable SMTP auto TLS fallback for testing

* Add HTTP fallback for account auth forms
2025-10-03 00:01:35 +08:00
shenlan
b9c886d473 Ensure TLS chain is served without reloading certificates (#379) 2025-10-02 23:23:03 +08:00
shenlan
9ceff86df5 feat(account): add email verification and password reset (#378) 2025-10-02 17:56:30 +08:00
shenlan
6ca7f6f81a Support configurable TLS CA bundles for account service (#377) 2025-10-02 17:07:19 +08:00
shenlan
56bd9d95bf feat: allow configuring account TLS and default UI endpoints (#376) 2025-10-02 16:55:03 +08:00
shenlan
4b542a23a4 Update login form defaults and MFA options (#375) 2025-10-02 16:45:15 +08:00
Haitao Pan
eb3211e9c8 Merge branch 'release/v0.4.0' 2025-10-02 16:30:15 +08:00
Haitao Pan
e94a8aed3b chore(account): update Makefile and TLS config 2025-10-02 16:29:36 +08:00
shenlan
1f7c231255 feat: wire authentication gateway to account service (#374) 2025-10-02 16:27:11 +08:00
shenlan
92da2855cc Improve account service TLS configuration handling (#371) 2025-10-02 15:34:39 +08:00
shenlan
e62de31887 Enhance MFA login flows (#372) 2025-10-02 15:34:02 +08:00
shenlan
d7c995ad51 Add MFA onboarding workflow to panel (#370) 2025-10-02 15:32:37 +08:00
shenlan
3193ef3882 Improve account service TLS configuration handling (#369) 2025-10-02 15:22:51 +08:00
shenlan
cf6d5a343a Improve MFA verification tolerance and docs (#368) 2025-10-02 15:16:38 +08:00
shenlan
7b82dce20a Add return home link to panel header (#367) 2025-10-02 14:31:39 +08:00
shenlan
2123809f27 docs: update account service mfa guidance (#366) 2025-10-02 14:06:07 +08:00
shenlan
70e9f98a3e Add reusable security checks workflow (#364) 2025-10-02 11:23:36 +08:00
shenlan
d869618a4a Ensure login form submits via POST (#365) 2025-10-02 11:23:11 +08:00
shenlan
69df239c54 Remove duplicate query parameter helper (#363) 2025-10-02 10:17:36 +08:00
shenlan
100b380b2b Secure auth forms by posting JSON bodies (#362) 2025-10-02 09:43:22 +08:00
shenlan
ad71a5f1a9 Prevent credential leaks in auth flows (#361) 2025-10-02 08:40:59 +08:00
shenlan
b434eb0afc Add server port and timeout configuration (#360) 2025-10-01 21:38:01 +08:00
shenlan
97168a00a7 Adjust login page copy and disable social auth buttons (#359) 2025-10-01 21:08:28 +08:00
shenlan
9c2d6ffe8b Update register hero copy (#358) 2025-10-01 19:46:03 +08:00
shenlan
a4a87a9b3c Hide register social auth buttons (#357) 2025-10-01 19:27:38 +08:00
Haitao Pan
fedc64660a chore: add SQL migration for UUID PK and update Yarn config/lockfile 2025-10-01 18:45:59 +08:00
shenlan
056af06919 Mark login, register, and panel features as stable (#356) 2025-10-01 18:42:41 +08:00
dependabot[bot]
69cead1cb6 chore(deps): bump pdfjs-dist from 3.11.174 to 4.2.67 in /ui/homepage (#312)
Bumps [pdfjs-dist](https://github.com/mozilla/pdf.js) from 3.11.174 to 4.2.67.
- [Release notes](https://github.com/mozilla/pdf.js/releases)
- [Commits](https://github.com/mozilla/pdf.js/compare/v3.11.174...v4.2.67)

---
updated-dependencies:
- dependency-name: pdfjs-dist
  dependency-version: 4.2.67
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-10-01 18:05:50 +08:00