mirror of
https://github.com/btouchard/ackify-ce.git
synced 2026-02-28 10:48:47 -06:00
Benjamin
68426bc882
- Implement PKCE (Proof Key for Code Exchange) with S256 method - Add crypto/pkce module with code verifier and challenge generation - Modify OAuth flow to include code_challenge in authorization requests - Update HandleCallback to validate code_verifier during token exchange - Extend session lifetime from 7 to 30 days - Add comprehensive unit tests for PKCE functions - Maintain backward compatibility with fallback for non-PKCE sessions - Add detailed logging for OAuth flow with PKCE tracking PKCE enhances security by preventing authorization code interception attacks, as recommended by OAuth 2.1 and OIDC standards. feat: add encrypted refresh token storage with automatic cleanup - Add oauth_sessions table for storing encrypted refresh tokens - Implement AES-256-GCM encryption for refresh tokens using cookie secret - Create OAuth session repository with full CRUD operations - Add SessionWorker for automatic cleanup of expired sessions - Configure cleanup to run every 24h for sessions older than 37 days - Modify OAuth flow to store refresh tokens after successful authentication - Track client IP and user agent for session security validation - Link OAuth sessions to user sessions via session ID - Add comprehensive encryption tests with security validations - Integrate SessionWorker into server lifecycle with graceful shutdown This enables persistent OAuth sessions with secure token storage, reducing the need for frequent re-authentication from 7 to 30 days.
30 lines
755 B
Markdown
30 lines
755 B
Markdown
# Ackify Documentation
|
|
|
|
Complete documentation for Ackify - Proof of Read with cryptographic signatures.
|
|
|
|
🇬🇧 **[English Documentation](en/)** | 🇫🇷 **[Documentation Française](fr/)**
|
|
|
|
---
|
|
|
|
## Quick Links
|
|
|
|
### 🇬🇧 English
|
|
- [Getting Started](en/getting-started.md)
|
|
- [Configuration](en/configuration.md)
|
|
- [Features](en/features/)
|
|
- [API Reference](en/api.md)
|
|
- [Deployment](en/deployment.md)
|
|
|
|
### 🇫🇷 Français
|
|
- [Démarrage Rapide](fr/getting-started.md)
|
|
- [Configuration](fr/configuration.md)
|
|
- [Fonctionnalités](fr/features/)
|
|
- [Référence API](fr/api.md)
|
|
- [Déploiement](fr/deployment.md)
|
|
|
|
---
|
|
|
|
## Contributing
|
|
|
|
See [Development Guide](en/development.md) (English) or [Guide de Développement](fr/development.md) (Français).
|