Commit Graph

834 Commits

Author SHA1 Message Date
Abhishek Shroff b1a6c7dcdc [server][cli] Generate API Keys/Tokens from CLI 2025-07-14 16:15:57 +05:30
Abhishek Shroff 2d0fb18265 [server][auth] Allow generating and reading unencoded api keys 2025-07-14 15:46:18 +05:30
Abhishek Shroff 274253d476 [server] Tweak default config 2025-07-14 15:42:45 +05:30
Abhishek Shroff 3b51db29ab [server][auth] Store encoded login tokens (#9) 2025-07-14 15:38:43 +05:30
Abhishek Shroff 1c97a7541c [server][auth] Don't unnecessarily expose keyID 2025-07-14 11:10:42 +05:30
Abhishek Shroff 84a5290a67 [server][mail] Add logging for failed emails 2025-07-14 10:50:30 +05:30
Abhishek Shroff d187e5155c [server][auth] Store hash of reset token in DB (#9) 2025-07-14 10:19:50 +05:30
Abhishek Shroff f70d4bfb57 [server][auth] Store keyID+sha256(key) for API keys (#9) 2025-07-14 10:08:15 +05:30
Abhishek Shroff 4e87878f88 [server][core][publinks] Use configurable auth for publinks (pbkdf by default) 2025-07-13 22:48:51 +05:30
Abhishek Shroff 7b7ad24133 [server][auth] Allow configuring PBKDF as the password hashing algorithm 2025-07-13 21:52:01 +05:30
Abhishek Shroff 7c9c6ed84d [server][cli] Add pbkdf2 timing command 2025-07-13 21:38:53 +05:30
Abhishek Shroff 491227545f [server][auth] Add support for PBKDF2 2025-07-13 21:38:30 +05:30
Abhishek Shroff 99604bc2e2 [server][cli] Add config argon2 command 2025-07-13 21:23:13 +05:30
Abhishek Shroff 6ca9dbc198 [server][auth][argon2] Use logarithmic memory parameter, set better defaults 2025-07-13 19:37:43 +05:30
Abhishek Shroff 9064814b16 [server][auth] Move argon2 variant detection into argon2 package 2025-07-13 17:51:53 +05:30
Abhishek Shroff 4e5b9f0b04 [server] move generatePKCEChallenge method to openid.go 2025-07-13 17:44:02 +05:30
Abhishek Shroff 6b59860df0 [server][auth] Modularize crypt password backend 2025-07-13 17:43:00 +05:30
Abhishek Shroff 66ae8097c9 [server][core] Remove ambiguous f.userPermission method 2025-07-12 16:34:10 +05:30
Abhishek Shroff 4066655fd6 [server][core] Fix getScopePermissions, Rename rename methods 2025-07-12 16:34:10 +05:30
Abhishek Shroff bc0432aa15 [server][auth] Set userHome 2025-07-12 16:34:10 +05:30
Abhishek Shroff e88316c77c [server][auth] Split auth.Auth into its own file 2025-07-12 16:34:10 +05:30
Abhishek Shroff 07b380daf5 [server][api] Add scope check for profile update and shared routes 2025-07-12 16:34:10 +05:30
Abhishek Shroff 34278d1bc6 [server] Use core.ErrInsufficientScope 2025-07-12 16:34:10 +05:30
Abhishek Shroff 5889939abc [server] filesystem scopes (untested) 2025-07-12 16:34:10 +05:30
Abhishek Shroff 6a8130d242 [server][auth] WIP: auth.Auth 2025-07-12 16:34:10 +05:30
Abhishek Shroff 118de5874b [server][auth] Use regular errors instead of core errors 2025-07-12 16:34:10 +05:30
Abhishek Shroff 7aa0a4b429 [server][auth] Add scopes to API keys (#16) 2025-07-12 16:34:10 +05:30
George Wu cb1ce3500f [server][auth] also disable routes if password, passwordreset is false. 2025-07-11 15:59:55 -07:00
George Wu 1c09d4b6d1 [server][auth] s/200/http.StatusOK/g 2025-07-11 15:58:38 -07:00
George Wu c9888f2c26 [server][auth] remove redundant setting of passwordBackend variable 2025-07-09 23:35:31 -07:00
George Wu 8bdc2bafb8 [server][auth] allow password backend to be none 2025-07-09 23:35:30 -07:00
Abhishek Shroff 5e11914b10 [server][unbreaking] Revert and fix breaking schema changes from 1d23d4f 2025-07-10 10:13:42 +05:30
Abhishek Shroff 9c2d640ecf [server][unbreaking] Revert and fix breaking schema changes from e3142e7f7a 2025-07-09 23:07:18 +05:30
Abhishek Shroff 93069f8508 [server][unbreaking] Revert and fix breaking schema changes from b9ccb57dd3 2025-07-09 23:06:41 +05:30
Abhishek Shroff 6e0dbe028e [server][unbreaking] Revert and fix breaking part of 1a152d819d 2025-07-09 23:04:29 +05:30
Abhishek Shroff 823dd1f59c [server][auth] Support api keys that never expire (#14) 2025-07-09 22:25:55 +05:30
Abhishek Shroff 86e2f15c65 [server][auth] Add support for named api keys 2025-07-09 22:24:39 +05:30
George Wu 3c347e848f [server][auth] s/redirecURI/redirectURI/g 2025-07-08 22:13:41 -07:00
George Wu 13f9feaa10 [server][auth] add pkce support for OIDC logins. 2025-07-08 22:12:37 -07:00
George Wu 81504a061e [server][auth] s/authoriation/authorization/ 2025-07-09 05:38:36 +02:00
George Wu 61604d980a [server][auth] fix inserting rows to api_keys table. 2025-07-08 18:49:47 -07:00
George Wu 49fe8d002d [server][auth] updates the authorization code flow for oidc and utilizes client password -- rfc6749#4.1.3 & rfc6749#2.3.1 2025-07-08 22:41:35 +02:00
Abhishek Shroff 1d23d4ffa0 [server][breaking] Use generated integer columns as primary keys for users and jobs 2025-07-09 01:37:38 +05:30
Abhishek Shroff b9ccb57dd3 [server][breaking] Change api_key schema streamline expiration and validity 2025-07-09 01:34:02 +05:30
Abhishek Shroff 1a152d819d [server][breaking] Change pending logins table schema, add token expiration 2025-07-09 01:23:15 +05:30
Abhishek Shroff e3142e7f7a [server][breaking] Use timestamptz everywhere 2025-07-09 01:04:31 +05:30
Abhishek Shroff 719a77cb9f [server][auth] Use base32 encoded keys with 15 secure random bytes 2025-07-09 01:03:22 +05:30
Abhishek Shroff da07ffa914 [server] loggers everywhere 2025-07-09 00:29:25 +05:30
Abhishek Shroff 49772d3231 [server] Remove logrus 2025-07-08 23:40:47 +05:30
Abhishek Shroff 5be3d7bcc5 [server][steve] Better logging for jobs 2025-07-08 23:29:59 +05:30