57 Commits

Author	SHA1	Message	Date
Evert Prants	491148baa6	make session lax	2022-09-20 17:27:52 +03:00
Evert Prants	33080558bc	remove some anys	2022-09-18 10:22:57 +03:00
Evert Prants	9c7820dc94	move session to module	2022-09-17 10:13:52 +03:00
Evert Prants	ff431c958c	jwt issuing	2022-09-16 18:11:36 +03:00
Evert Prants	5769eca8ee	redisable the oauth logger	2022-09-15 19:23:07 +03:00
Evert Prants	bfdfb2550c	cors for api	2022-09-15 19:21:05 +03:00
Evert Prants	70fd84dd0f	this also needs cascades	2022-09-14 21:08:08 +03:00
Evert Prants	eb5f66e4cd	fix some foreign keys	2022-09-14 21:02:48 +03:00
Evert Prants	7e56e0eec4	allow non admins to delete their clients	2022-09-14 20:44:18 +03:00
Evert Prants	6195f879db	add host, port to config, rename session	2022-09-12 21:55:02 +03:00
Evert Prants	b4befa02fc	revert test	2022-09-11 15:49:14 +03:00
Evert Prants	ddc996b5bf	test	2022-09-11 14:57:22 +03:00
Evert Prants	7a2e4a90cb	trust proxy properly	2022-09-11 11:58:15 +03:00
Evert Prants	991bc68624	add nonce to token tables just in case, add public key token type for future auth features	2022-09-11 10:56:07 +03:00
Evert Prants	4b4cd88698	encode redirect uri	2022-09-10 12:59:04 +03:00
Evert Prants	3ca815690e	old icynet migration	2022-09-10 12:52:39 +03:00
Evert Prants	eadab90340	audit changes	2022-09-10 09:29:03 +03:00
Evert Prants	176fe16b2f	audit logs admin api	2022-09-09 21:50:14 +03:00
Evert Prants	be604b24c6	audit logging	2022-09-09 20:12:22 +03:00
Evert Prants	6e05c990d1	some changes	2022-09-09 18:28:54 +03:00
Evert Prants	3b3fa2a7de	default from email	2022-09-09 17:51:15 +03:00
Evert Prants	42d0f302bf	delete clients	2022-09-09 17:37:21 +03:00
Evert Prants	97fe447a43	require current password for email change	2022-09-09 17:18:35 +03:00
Evert Prants	b02191608a	fix some middleware nonsense	2022-09-01 20:19:08 +03:00
Evert Prants	564f3427a4	pretty useless upload endpoint	2022-08-30 21:09:43 +03:00
Evert Prants	7f523c9606	put user and client api endpoints under api	2022-08-29 17:51:20 +03:00
Evert Prants	d92b8ab828	totp deactivate, delete tokens on oauth deauth	2022-08-28 16:17:15 +03:00
Evert Prants	7a06c882ac	separate role for user oauth2 clients	2022-08-27 19:58:24 +03:00
Evert Prants	e884ce80fc	comprehensive oauth2 admin api	2022-08-27 18:52:37 +03:00
Evert Prants	13eefb166a	pagination parse	2022-08-27 13:56:31 +03:00
Evert Prants	266645d08f	start admin api module	2022-08-27 13:53:37 +03:00
Evert Prants	bb86a25ad4	rearrange stuff	2022-08-27 11:59:26 +03:00
Evert Prants	9e68698ddc	fix typeorm timestamps	2022-08-26 17:14:40 +03:00
Evert Prants	c78af3f7dc	typeorm command with ts-node	2022-08-22 21:23:25 +03:00
Evert Prants	ac41a4668f	typeorm test	2022-08-22 20:59:22 +03:00
Evert Prants	473e30e7fe	port and host in env	2022-08-22 20:51:37 +03:00
Evert Prants	6e90d40db4	disable registrations	2022-08-22 20:39:31 +03:00
Evert Prants	9cebc2ca68	remember me checkbox, slightly more useful email hint	2022-08-18 12:34:05 +03:00
Evert Prants	545a71e57d	small updates	2022-08-18 10:12:02 +03:00
Evert Prants	ded40a2514	upgrade everything (except redis, it is dumb)	2022-08-17 22:48:20 +03:00
Evert Prants	a21a2257db	Some progress	2022-08-17 21:56:47 +03:00
Evert Prants	3f399320b6	privilege	2022-04-15 22:00:02 +03:00
Evert Prants	8cff63a0a7	fixes	2022-03-26 09:22:14 +02:00
Evert Prants	42dbf9736e	totp oops	2022-03-20 20:27:09 +02:00
Evert Prants	ed7b8733ee	logout button	2022-03-20 20:21:15 +02:00
Evert Prants	bcc3b86b4d	security settings	2022-03-20 19:51:42 +02:00
Evert Prants	abb0e24d99	redirect uri follows the user	2022-03-20 19:05:21 +02:00
Evert Prants	21a1ceeb2d	steps towards more proper csrf validation	2022-03-20 17:06:04 +02:00
Evert Prants	c35cb362ff	oauth2 revokations	2022-03-20 16:50:12 +02:00
Evert Prants	88f19163c6	upload user avatar, front end avatar crop modal	2022-03-20 14:09:36 +02:00