shenlan
d76f7ed2ef
Merge pull request #402 from svc-design/codex/refactor-multi-factor-authentication-workflow
2025-10-05 08:46:58 +08:00
shenlan
4a552a7abb
Refine MFA TOTP provisioning and verification
2025-10-05 08:45:11 +08:00
shenlan
c2e3adba35
Adjust login MFA handling for new users ( #401 )
2025-10-05 08:00:16 +08:00
shenlan
45691adcd2
Fix account postgres store email verification handling ( #400 )
2025-10-05 07:37:40 +08:00
Haitao Pan
0937249f9e
fix: ensure uuid schema consistency and update homepage runtime config
2025-10-05 07:18:13 +08:00
shenlan
6ab10f1e72
Refine UUID schema migration ( #399 )
2025-10-05 07:01:13 +08:00
shenlan
029aad0fe9
Ensure UUID migrations are idempotent ( #398 )
2025-10-04 22:59:56 +08:00
shenlan
ffab27656f
Handle legacy schemas without MFA columns ( #397 )
2025-10-04 22:26:57 +08:00
shenlan
bb81a897b2
Make UUID migration idempotent when user_id dropped ( #396 )
2025-10-04 22:13:00 +08:00
shenlan
88cd7283eb
Make UUID migration idempotent ( #395 )
2025-10-04 21:47:46 +08:00
shenlan
2a9287e812
Align account API proxy paths and add migrations ( #394 )
2025-10-04 21:20:55 +08:00
shenlan
6d507611a0
Add MFA management modal with disable support ( #393 )
2025-10-04 20:38:16 +08:00
shenlan
b08e8e4ad7
feat: auto-detect MFA requirements on login ( #392 )
2025-10-04 20:37:07 +08:00
dependabot[bot]
08b37b4f3f
chore(deps): bump github.com/gin-contrib/cors from 1.5.0 to 1.6.0 ( #384 )
...
Bumps [github.com/gin-contrib/cors](https://github.com/gin-contrib/cors ) from 1.5.0 to 1.6.0.
- [Release notes](https://github.com/gin-contrib/cors/releases )
- [Changelog](https://github.com/gin-contrib/cors/blob/master/.goreleaser.yaml )
- [Commits](https://github.com/gin-contrib/cors/compare/v1.5.0...v1.6.0 )
---
updated-dependencies:
- dependency-name: github.com/gin-contrib/cors
dependency-version: 1.6.0
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-10-03 12:29:30 +08:00
shenlan
04eeaff83f
Add tests for session deletion and healthz endpoint ( #389 )
2025-10-03 12:29:15 +08:00
shenlan
0a18ea1b77
Fix Postgres UUID handling in account store ( #388 )
2025-10-03 11:38:22 +08:00
shenlan
4d5f42f991
Handle placeholder SMTP configuration ( #387 )
2025-10-03 09:29:59 +08:00
shenlan
888e3a6ae5
Fix local account service configuration for dev usage ( #386 )
...
* Adjust account service defaults for local development
* Add runtime service configuration for account endpoints
* Switch runtime service config to YAML
2025-10-03 08:44:14 +08:00
shenlan
19b1034518
feat: make account service domain configurable ( #385 )
2025-10-03 01:04:55 +08:00
shenlan
1567bc327d
Update account service default hostname ( #383 )
2025-10-03 00:34:19 +08:00
shenlan
d7bd4147ae
Add CORS middleware to account service ( #382 )
2025-10-03 00:33:58 +08:00
shenlan
3f9b89ace5
Guard register highlights rendering ( #381 )
2025-10-03 00:18:17 +08:00
shenlan
e61b3f5028
Add SMTP auto TLS fallback to support non-SSL testing ( #380 )
...
* Enable SMTP auto TLS fallback for testing
* Add HTTP fallback for account auth forms
2025-10-03 00:01:35 +08:00
shenlan
b9c886d473
Ensure TLS chain is served without reloading certificates ( #379 )
2025-10-02 23:23:03 +08:00
shenlan
9ceff86df5
feat(account): add email verification and password reset ( #378 )
2025-10-02 17:56:30 +08:00
shenlan
6ca7f6f81a
Support configurable TLS CA bundles for account service ( #377 )
2025-10-02 17:07:19 +08:00
shenlan
56bd9d95bf
feat: allow configuring account TLS and default UI endpoints ( #376 )
2025-10-02 16:55:03 +08:00
shenlan
4b542a23a4
Update login form defaults and MFA options ( #375 )
2025-10-02 16:45:15 +08:00
Haitao Pan
eb3211e9c8
Merge branch 'release/v0.4.0'
2025-10-02 16:30:15 +08:00
Haitao Pan
e94a8aed3b
chore(account): update Makefile and TLS config
2025-10-02 16:29:36 +08:00
shenlan
1f7c231255
feat: wire authentication gateway to account service ( #374 )
2025-10-02 16:27:11 +08:00
shenlan
92da2855cc
Improve account service TLS configuration handling ( #371 )
2025-10-02 15:34:39 +08:00
shenlan
e62de31887
Enhance MFA login flows ( #372 )
2025-10-02 15:34:02 +08:00
shenlan
d7c995ad51
Add MFA onboarding workflow to panel ( #370 )
2025-10-02 15:32:37 +08:00
shenlan
3193ef3882
Improve account service TLS configuration handling ( #369 )
2025-10-02 15:22:51 +08:00
shenlan
cf6d5a343a
Improve MFA verification tolerance and docs ( #368 )
2025-10-02 15:16:38 +08:00
shenlan
7b82dce20a
Add return home link to panel header ( #367 )
2025-10-02 14:31:39 +08:00
shenlan
2123809f27
docs: update account service mfa guidance ( #366 )
2025-10-02 14:06:07 +08:00
shenlan
70e9f98a3e
Add reusable security checks workflow ( #364 )
2025-10-02 11:23:36 +08:00
shenlan
d869618a4a
Ensure login form submits via POST ( #365 )
2025-10-02 11:23:11 +08:00
shenlan
69df239c54
Remove duplicate query parameter helper ( #363 )
2025-10-02 10:17:36 +08:00
shenlan
100b380b2b
Secure auth forms by posting JSON bodies ( #362 )
2025-10-02 09:43:22 +08:00
shenlan
ad71a5f1a9
Prevent credential leaks in auth flows ( #361 )
2025-10-02 08:40:59 +08:00
shenlan
b434eb0afc
Add server port and timeout configuration ( #360 )
2025-10-01 21:38:01 +08:00
shenlan
97168a00a7
Adjust login page copy and disable social auth buttons ( #359 )
2025-10-01 21:08:28 +08:00
shenlan
9c2d6ffe8b
Update register hero copy ( #358 )
2025-10-01 19:46:03 +08:00
shenlan
a4a87a9b3c
Hide register social auth buttons ( #357 )
2025-10-01 19:27:38 +08:00
Haitao Pan
fedc64660a
chore: add SQL migration for UUID PK and update Yarn config/lockfile
2025-10-01 18:45:59 +08:00
shenlan
056af06919
Mark login, register, and panel features as stable ( #356 )
2025-10-01 18:42:41 +08:00
dependabot[bot]
69cead1cb6
chore(deps): bump pdfjs-dist from 3.11.174 to 4.2.67 in /ui/homepage ( #312 )
...
Bumps [pdfjs-dist](https://github.com/mozilla/pdf.js ) from 3.11.174 to 4.2.67.
- [Release notes](https://github.com/mozilla/pdf.js/releases )
- [Commits](https://github.com/mozilla/pdf.js/compare/v3.11.174...v4.2.67 )
---
updated-dependencies:
- dependency-name: pdfjs-dist
dependency-version: 4.2.67
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-10-01 18:05:50 +08:00