Commit Graph

853 Commits

Author SHA1 Message Date
Abhishek Shroff 1d9eac4ef2 [server] Send error for unmet password requirements in reset 2025-07-19 11:10:41 +05:30
Abhishek Shroff 6cf0d0118b [server] Single error message for all unmet password requirements [#31] 2025-07-19 11:09:34 +05:30
Abhishek Shroff 0893ff135a [server][api] Add /auth/password/change route [#18] 2025-07-18 23:50:33 +05:30
Abhishek Shroff bf68d3ded4 [server][api] Rename my => user 2025-07-18 13:58:08 +05:30
Abhishek Shroff 671269ca8d [server][api] Rename magic_links => magic_link 2025-07-16 01:57:15 +05:30
Abhishek Shroff 3e74c8a469 [server][auth] Print warning and disable password reset and magic links if necessary 2025-07-16 01:17:05 +05:30
Abhishek Shroff fa070841a6 [server][auth] Ensure that mail is configured for password reset and 2025-07-16 00:29:03 +05:30
Abhishek Shroff bd21c6ec7c [server] Fix invalid token handling 2025-07-15 22:00:52 +05:30
Abhishek Shroff 759bcbfe16 [server][auth] Request Login Token (#2) 2025-07-15 22:00:16 +05:30
Abhishek Shroff 17d8dd1f0c [server][api] Change password auth routes 2025-07-15 09:13:12 +05:30
Abhishek Shroff 3832429962 [server][webdav] Fix uuid root 2025-07-14 21:36:31 +05:30
Abhishek Shroff 685689ad68 [server][cli] Allow revoking keys 2025-07-14 21:16:12 +05:30
Abhishek Shroff 57dd87b02b [server][cli] Add command to list api keys 2025-07-14 20:52:18 +05:30
Abhishek Shroff 10531e5617 [server] Change cookie name, and expected auth header 2025-07-14 16:56:24 +05:30
Abhishek Shroff 19e9c78010 [server] Remove left over prints 2025-07-14 16:45:13 +05:30
Abhishek Shroff 3903913048 [server][api] Support API token in basic auth with empty username 2025-07-14 16:43:19 +05:30
Abhishek Shroff 0555f65bca [server][api] Use API Keys for HTTP Basic auth (#6) 2025-07-14 16:37:42 +05:30
Abhishek Shroff dccb0212b1 [server][auth] Use Base64 encoding for api key id 2025-07-14 16:33:54 +05:30
Abhishek Shroff 2b4f433a77 [server][auth] Handle encoding/decoding instead of leaving it to consumers 2025-07-14 16:24:39 +05:30
Abhishek Shroff b1a6c7dcdc [server][cli] Generate API Keys/Tokens from CLI 2025-07-14 16:15:57 +05:30
Abhishek Shroff 2d0fb18265 [server][auth] Allow generating and reading unencoded api keys 2025-07-14 15:46:18 +05:30
Abhishek Shroff 274253d476 [server] Tweak default config 2025-07-14 15:42:45 +05:30
Abhishek Shroff 3b51db29ab [server][auth] Store encoded login tokens (#9) 2025-07-14 15:38:43 +05:30
Abhishek Shroff 1c97a7541c [server][auth] Don't unnecessarily expose keyID 2025-07-14 11:10:42 +05:30
Abhishek Shroff 84a5290a67 [server][mail] Add logging for failed emails 2025-07-14 10:50:30 +05:30
Abhishek Shroff d187e5155c [server][auth] Store hash of reset token in DB (#9) 2025-07-14 10:19:50 +05:30
Abhishek Shroff f70d4bfb57 [server][auth] Store keyID+sha256(key) for API keys (#9) 2025-07-14 10:08:15 +05:30
Abhishek Shroff 4e87878f88 [server][core][publinks] Use configurable auth for publinks (pbkdf by default) 2025-07-13 22:48:51 +05:30
Abhishek Shroff 7b7ad24133 [server][auth] Allow configuring PBKDF as the password hashing algorithm 2025-07-13 21:52:01 +05:30
Abhishek Shroff 7c9c6ed84d [server][cli] Add pbkdf2 timing command 2025-07-13 21:38:53 +05:30
Abhishek Shroff 491227545f [server][auth] Add support for PBKDF2 2025-07-13 21:38:30 +05:30
Abhishek Shroff 99604bc2e2 [server][cli] Add config argon2 command 2025-07-13 21:23:13 +05:30
Abhishek Shroff 6ca9dbc198 [server][auth][argon2] Use logarithmic memory parameter, set better defaults 2025-07-13 19:37:43 +05:30
Abhishek Shroff 9064814b16 [server][auth] Move argon2 variant detection into argon2 package 2025-07-13 17:51:53 +05:30
Abhishek Shroff 4e5b9f0b04 [server] move generatePKCEChallenge method to openid.go 2025-07-13 17:44:02 +05:30
Abhishek Shroff 6b59860df0 [server][auth] Modularize crypt password backend 2025-07-13 17:43:00 +05:30
Abhishek Shroff 66ae8097c9 [server][core] Remove ambiguous f.userPermission method 2025-07-12 16:34:10 +05:30
Abhishek Shroff 4066655fd6 [server][core] Fix getScopePermissions, Rename rename methods 2025-07-12 16:34:10 +05:30
Abhishek Shroff bc0432aa15 [server][auth] Set userHome 2025-07-12 16:34:10 +05:30
Abhishek Shroff e88316c77c [server][auth] Split auth.Auth into its own file 2025-07-12 16:34:10 +05:30
Abhishek Shroff 07b380daf5 [server][api] Add scope check for profile update and shared routes 2025-07-12 16:34:10 +05:30
Abhishek Shroff 34278d1bc6 [server] Use core.ErrInsufficientScope 2025-07-12 16:34:10 +05:30
Abhishek Shroff 5889939abc [server] filesystem scopes (untested) 2025-07-12 16:34:10 +05:30
Abhishek Shroff 6a8130d242 [server][auth] WIP: auth.Auth 2025-07-12 16:34:10 +05:30
Abhishek Shroff 118de5874b [server][auth] Use regular errors instead of core errors 2025-07-12 16:34:10 +05:30
Abhishek Shroff 7aa0a4b429 [server][auth] Add scopes to API keys (#16) 2025-07-12 16:34:10 +05:30
George Wu cb1ce3500f [server][auth] also disable routes if password, passwordreset is false. 2025-07-11 15:59:55 -07:00
George Wu 1c09d4b6d1 [server][auth] s/200/http.StatusOK/g 2025-07-11 15:58:38 -07:00
George Wu c9888f2c26 [server][auth] remove redundant setting of passwordBackend variable 2025-07-09 23:35:31 -07:00
George Wu 8bdc2bafb8 [server][auth] allow password backend to be none 2025-07-09 23:35:30 -07:00