Commit Graph

636 Commits

Author SHA1 Message Date
shenlan
e61b3f5028 Add SMTP auto TLS fallback to support non-SSL testing (#380)
* Enable SMTP auto TLS fallback for testing

* Add HTTP fallback for account auth forms
2025-10-03 00:01:35 +08:00
shenlan
b9c886d473 Ensure TLS chain is served without reloading certificates (#379) 2025-10-02 23:23:03 +08:00
shenlan
9ceff86df5 feat(account): add email verification and password reset (#378) 2025-10-02 17:56:30 +08:00
shenlan
6ca7f6f81a Support configurable TLS CA bundles for account service (#377) 2025-10-02 17:07:19 +08:00
shenlan
56bd9d95bf feat: allow configuring account TLS and default UI endpoints (#376) 2025-10-02 16:55:03 +08:00
shenlan
4b542a23a4 Update login form defaults and MFA options (#375) 2025-10-02 16:45:15 +08:00
Haitao Pan
eb3211e9c8 Merge branch 'release/v0.4.0' 2025-10-02 16:30:15 +08:00
Haitao Pan
e94a8aed3b chore(account): update Makefile and TLS config 2025-10-02 16:29:36 +08:00
shenlan
1f7c231255 feat: wire authentication gateway to account service (#374) 2025-10-02 16:27:11 +08:00
shenlan
92da2855cc Improve account service TLS configuration handling (#371) 2025-10-02 15:34:39 +08:00
shenlan
e62de31887 Enhance MFA login flows (#372) 2025-10-02 15:34:02 +08:00
shenlan
d7c995ad51 Add MFA onboarding workflow to panel (#370) 2025-10-02 15:32:37 +08:00
shenlan
3193ef3882 Improve account service TLS configuration handling (#369) 2025-10-02 15:22:51 +08:00
shenlan
cf6d5a343a Improve MFA verification tolerance and docs (#368) 2025-10-02 15:16:38 +08:00
shenlan
7b82dce20a Add return home link to panel header (#367) 2025-10-02 14:31:39 +08:00
shenlan
2123809f27 docs: update account service mfa guidance (#366) 2025-10-02 14:06:07 +08:00
shenlan
70e9f98a3e Add reusable security checks workflow (#364) 2025-10-02 11:23:36 +08:00
shenlan
d869618a4a Ensure login form submits via POST (#365) 2025-10-02 11:23:11 +08:00
shenlan
69df239c54 Remove duplicate query parameter helper (#363) 2025-10-02 10:17:36 +08:00
shenlan
100b380b2b Secure auth forms by posting JSON bodies (#362) 2025-10-02 09:43:22 +08:00
shenlan
ad71a5f1a9 Prevent credential leaks in auth flows (#361) 2025-10-02 08:40:59 +08:00
shenlan
b434eb0afc Add server port and timeout configuration (#360) 2025-10-01 21:38:01 +08:00
shenlan
97168a00a7 Adjust login page copy and disable social auth buttons (#359) 2025-10-01 21:08:28 +08:00
shenlan
9c2d6ffe8b Update register hero copy (#358) 2025-10-01 19:46:03 +08:00
shenlan
a4a87a9b3c Hide register social auth buttons (#357) 2025-10-01 19:27:38 +08:00
Haitao Pan
fedc64660a chore: add SQL migration for UUID PK and update Yarn config/lockfile 2025-10-01 18:45:59 +08:00
shenlan
056af06919 Mark login, register, and panel features as stable (#356) 2025-10-01 18:42:41 +08:00
dependabot[bot]
69cead1cb6 chore(deps): bump pdfjs-dist from 3.11.174 to 4.2.67 in /ui/homepage (#312)
Bumps [pdfjs-dist](https://github.com/mozilla/pdf.js) from 3.11.174 to 4.2.67.
- [Release notes](https://github.com/mozilla/pdf.js/releases)
- [Commits](https://github.com/mozilla/pdf.js/compare/v3.11.174...v4.2.67)

---
updated-dependencies:
- dependency-name: pdfjs-dist
  dependency-version: 4.2.67
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-10-01 18:05:50 +08:00
shenlan
15f6367f99 Tighten panel spacing next to sidebar (#355) 2025-10-01 18:05:21 +08:00
shenlan
18c2a95c1c Adjust navbar account label when logged in (#354) 2025-10-01 18:01:49 +08:00
shenlan
6b3293d133 Align account UUID usage across backend and UI (#353) 2025-10-01 17:42:50 +08:00
Haitao Pan
4e6b34b4e7 feat(db): add UUID migration script and update schema 2025-10-01 17:27:47 +08:00
shenlan
305092c688 feat(ui): refresh panel landing with user center summary (#352) 2025-10-01 17:05:55 +08:00
shenlan
5a566b8e53 Add periodic session refresh (#351) 2025-10-01 15:46:03 +08:00
shenlan
97ec2cc6cb Enable session focus revalidation (#350) 2025-10-01 15:37:57 +08:00
shenlan
8751f32d27 fix: resolve session route export conflict (#349) 2025-10-01 13:05:15 +08:00
shenlan
51dd109f4b Fix Next.js build by making static export optional (#347) 2025-10-01 12:59:52 +08:00
shenlan
714af314ca fix: resolve session route export conflict (#348) 2025-10-01 12:59:43 +08:00
shenlan
07b076bd44 feat(ui): hydrate homepage user state with zustand (#345) 2025-10-01 12:56:18 +08:00
shenlan
5d5c17cf2c feat(ui): hydrate homepage user state with zustand (#344) 2025-10-01 12:55:57 +08:00
shenlan
7d72025ecf feat(ui): hydrate homepage user state with zustand (#346) 2025-10-01 12:48:12 +08:00
shenlan
1bd6d536bb fix: allow dynamic session api (#343) 2025-10-01 12:33:12 +08:00
shenlan
fde78d9353 feat(ui): persist auth session with swr and zustand (#342) 2025-10-01 12:04:23 +08:00
shenlan
b7b05f3b9d Improve login flow and account navigation (#341) 2025-10-01 11:20:53 +08:00
shenlan
0bc7ce56e9 Improve login flow and account navigation (#340) 2025-10-01 11:20:39 +08:00
shenlan
117fbcda78 Add GetUserByName to postgres store implementation (#339) 2025-10-01 10:39:44 +08:00
shenlan
e9f71bd7fe fix: allow login payload binding for form requests (#338) 2025-10-01 10:39:15 +08:00
shenlan
57dd9e83a9 Add GetUserByName to postgres store implementation (#337) 2025-10-01 10:15:04 +08:00
shenlan
3cef7a9cf1 fix: ensure login error strings are defined (#335) 2025-10-01 10:05:42 +08:00
shenlan
8f8a069481 Connect account registration to Postgres store (#336) 2025-10-01 10:05:31 +08:00