Commit Graph

1547 Commits

Author SHA1 Message Date
Abhishek Shroff
c19de8a0a3 [client] Inline Login/Forgot Password buttons 2025-07-16 01:34:37 +05:30
Abhishek Shroff
3e74c8a469 [server][auth] Print warning and disable password reset and magic links if necessary 2025-07-16 01:17:05 +05:30
Abhishek Shroff
fa070841a6 [server][auth] Ensure that mail is configured for password reset and 2025-07-16 00:29:03 +05:30
Abhishek Shroff
6aea223aa3 [client] Change login token param name 2025-07-15 22:00:52 +05:30
Abhishek Shroff
bd21c6ec7c [server] Fix invalid token handling 2025-07-15 22:00:52 +05:30
Abhishek Shroff
759bcbfe16 [server][auth] Request Login Token (#2) 2025-07-15 22:00:16 +05:30
Abhishek Shroff
95089a726c [client] Update password login routes 2025-07-15 09:14:35 +05:30
Abhishek Shroff
17d8dd1f0c [server][api] Change password auth routes 2025-07-15 09:13:12 +05:30
Abhishek Shroff
3832429962 [server][webdav] Fix uuid root 2025-07-14 21:36:31 +05:30
Abhishek Shroff
685689ad68 [server][cli] Allow revoking keys 2025-07-14 21:16:12 +05:30
Abhishek Shroff
57dd87b02b [server][cli] Add command to list api keys 2025-07-14 20:52:18 +05:30
Abhishek Shroff
4821850a45 [client] Rename apiKey => apiToken, use Bearer auth header 2025-07-14 17:09:56 +05:30
Abhishek Shroff
10531e5617 [server] Change cookie name, and expected auth header 2025-07-14 16:56:24 +05:30
Abhishek Shroff
19e9c78010 [server] Remove left over prints 2025-07-14 16:45:13 +05:30
Abhishek Shroff
3903913048 [server][api] Support API token in basic auth with empty username 2025-07-14 16:43:19 +05:30
Abhishek Shroff
0555f65bca [server][api] Use API Keys for HTTP Basic auth (#6) 2025-07-14 16:37:42 +05:30
Abhishek Shroff
dccb0212b1 [server][auth] Use Base64 encoding for api key id 2025-07-14 16:33:54 +05:30
Abhishek Shroff
2b4f433a77 [server][auth] Handle encoding/decoding instead of leaving it to consumers 2025-07-14 16:24:39 +05:30
Abhishek Shroff
b1a6c7dcdc [server][cli] Generate API Keys/Tokens from CLI 2025-07-14 16:15:57 +05:30
Abhishek Shroff
2d0fb18265 [server][auth] Allow generating and reading unencoded api keys 2025-07-14 15:46:18 +05:30
Abhishek Shroff
274253d476 [server] Tweak default config 2025-07-14 15:42:45 +05:30
Abhishek Shroff
3b51db29ab [server][auth] Store encoded login tokens (#9) 2025-07-14 15:38:43 +05:30
Abhishek Shroff
1c97a7541c [server][auth] Don't unnecessarily expose keyID 2025-07-14 11:10:42 +05:30
Abhishek Shroff
84a5290a67 [server][mail] Add logging for failed emails 2025-07-14 10:50:30 +05:30
Abhishek Shroff
d187e5155c [server][auth] Store hash of reset token in DB (#9) 2025-07-14 10:19:50 +05:30
Abhishek Shroff
f70d4bfb57 [server][auth] Store keyID+sha256(key) for API keys (#9) 2025-07-14 10:08:15 +05:30
Abhishek Shroff
4e87878f88 [server][core][publinks] Use configurable auth for publinks (pbkdf by default) 2025-07-13 22:48:51 +05:30
Abhishek Shroff
7b7ad24133 [server][auth] Allow configuring PBKDF as the password hashing algorithm 2025-07-13 21:52:01 +05:30
Abhishek Shroff
7c9c6ed84d [server][cli] Add pbkdf2 timing command 2025-07-13 21:38:53 +05:30
Abhishek Shroff
491227545f [server][auth] Add support for PBKDF2 2025-07-13 21:38:30 +05:30
Abhishek Shroff
99604bc2e2 [server][cli] Add config argon2 command 2025-07-13 21:23:13 +05:30
Abhishek Shroff
6ca9dbc198 [server][auth][argon2] Use logarithmic memory parameter, set better defaults 2025-07-13 19:37:43 +05:30
Abhishek Shroff
9064814b16 [server][auth] Move argon2 variant detection into argon2 package 2025-07-13 17:51:53 +05:30
Abhishek Shroff
4e5b9f0b04 [server] move generatePKCEChallenge method to openid.go 2025-07-13 17:44:02 +05:30
Abhishek Shroff
6b59860df0 [server][auth] Modularize crypt password backend 2025-07-13 17:43:00 +05:30
Abhishek Shroff
66ae8097c9 [server][core] Remove ambiguous f.userPermission method 2025-07-12 16:34:10 +05:30
Abhishek Shroff
4066655fd6 [server][core] Fix getScopePermissions, Rename rename methods 2025-07-12 16:34:10 +05:30
Abhishek Shroff
bc0432aa15 [server][auth] Set userHome 2025-07-12 16:34:10 +05:30
Abhishek Shroff
e88316c77c [server][auth] Split auth.Auth into its own file 2025-07-12 16:34:10 +05:30
Abhishek Shroff
07b380daf5 [server][api] Add scope check for profile update and shared routes 2025-07-12 16:34:10 +05:30
Abhishek Shroff
34278d1bc6 [server] Use core.ErrInsufficientScope 2025-07-12 16:34:10 +05:30
Abhishek Shroff
5889939abc [server] filesystem scopes (untested) 2025-07-12 16:34:10 +05:30
Abhishek Shroff
6a8130d242 [server][auth] WIP: auth.Auth 2025-07-12 16:34:10 +05:30
Abhishek Shroff
118de5874b [server][auth] Use regular errors instead of core errors 2025-07-12 16:34:10 +05:30
Abhishek Shroff
7aa0a4b429 [server][auth] Add scopes to API keys (#16) 2025-07-12 16:34:10 +05:30
George Wu
cb1ce3500f [server][auth] also disable routes if password, passwordreset is false. 2025-07-11 15:59:55 -07:00
George Wu
1c09d4b6d1 [server][auth] s/200/http.StatusOK/g 2025-07-11 15:58:38 -07:00
Abhishek Shroff
1292cfcc55 [meta] Add link to Matrix badge 2025-07-11 22:02:14 +05:30
Abhishek Shroff
3775ac5c8a [meta] Add matrix chat to the readme 2025-07-11 22:00:09 +05:30
George Wu
8b08d33dc5 [client] fix typo s/openIDProviers/openIDProviders/g 2025-07-10 20:57:20 -07:00