10b1e9995d
fix: harden recovery migration flow
2026-05-21 17:43:25 +09:00
10867218d4
feat: migrate legacy recovery codes ( #1684 )
2026-05-21 16:31:41 +08:00
d895c4a336
enhance(ws): improve session security
2026-04-04 09:48:18 +08:00
fb37c94276
feat: implement short token endpoint for WebSocket authentication
...
- Added `InitTokenRouter` to define the `/token/short` endpoint for issuing short tokens.
- Created `IssueShortToken` function to handle short token generation and response.
- Updated WebSocket middleware to require short token for authentication, preventing CSWSH attacks.
- Modified user store and login handling to integrate short token functionality.
- Enhanced documentation to reflect changes in WebSocket security requirements.
2026-04-02 00:06:04 +08:00
7b66578adb
chore(deps): update various dependencies
2026-03-14 15:25:18 +00:00
0e7ea57110
feat: support oidc login ( #1488 )
2025-12-15 21:56:59 +08:00
a6fbd2f567
fix(user): remove password from context payload if nil
2025-10-17 22:15:54 +08:00
e2b66fd8dd
feat(dashboard): add sites navigation #1054
2025-08-14 11:04:49 +08:00
a3f8f90668
feat(auth): implement short token for user authentication and update related login responses
2025-07-03 10:10:05 +00:00
08b497acd1
feat(user): add default user initialization
2025-07-02 19:51:22 +08:00
1dbb852a57
feat(user): persists prefer language in db #1155
2025-06-23 07:31:15 +00:00
0808eb09c3
feat: implement user profile management
2025-05-24 13:28:57 +00:00
b469ca7961
refactor: replace api error handler with cosy err handler
2025-03-29 20:33:48 +08:00
d1d13b620f
feat(cli): reset init user password
2025-03-03 03:40:09 +00:00
a91fe4b5ac
fix(otp): crash after TOTP enroll
2025-02-11 00:37:57 +09:00
121287df21
Merge branch 'dev' into refactor/otp
2025-02-10 23:41:11 +09:00
5ade465ac6
feat(otp): encrypt recovery codes with AES
2025-02-10 23:21:52 +09:00
69a7f38ba7
fix: build for 32-bit platform
2025-02-10 14:57:26 +09:00
0d1f56a43e
feat: new recovery codes
2025-02-09 23:36:28 +09:00
20531971cf
feat: encrypt login and install request #852
2025-02-07 21:10:11 +08:00
aedf631254
refactor(otp): generate enroll QR code in front-end
2025-02-07 21:05:17 +09:00
7049599922
fix: fail to modify init user #852
2025-02-06 18:03:49 +08:00
465eae9858
refactor: user curd
2025-01-31 23:11:14 +08:00
80f01e61d3
Merge pull request #831 from caisi35/dev
...
fix duplicate user and attempts
2025-01-31 21:33:41 +08:00
e04773a409
fix(user):register duplicate name
2025-01-24 17:28:40 +08:00
650196d06a
enhance(wip): error handle
2025-01-24 16:41:35 +08:00
835349c33f
feat: add external url for casdoor #603
2024-12-15 16:54:30 +08:00
6abf68261c
fix: webauthn cannot register #753
2024-11-23 20:56:38 +08:00
bc70567dc1
feat(wip): node selector supports sse
2024-11-16 10:58:02 +08:00
7ad5cac3b8
feat(wip): site category
2024-10-26 10:39:31 +08:00
c5f5038d35
style(go): sort imports
2024-10-24 18:22:45 +08:00
918f920d57
fix: gen code generator; some unit tests
2024-10-22 17:27:40 +08:00
33a996e777
refactor: migrate to new cosy
2024-10-22 16:38:38 +08:00
20e55e715d
fix(casdoor): use certificate path instead to address env issue #584
2024-10-06 22:57:13 +08:00
f42a6c2d08
enhance: by default, passkey is used for 2fa if passkey is used to login
2024-09-16 13:57:31 +08:00
0a6a7693a1
feat: 2fa via passkey
2024-09-16 11:18:14 +08:00
bdfbbd0e8f
feat: login via passkey
2024-09-15 20:32:03 +08:00
cb3599e721
feat: copy secret to register otp #551
2024-09-15 11:57:35 +08:00
796005fad4
fix: unable to recover user from trash or permanently delete them #552
2024-09-15 10:14:40 +08:00
2cce7849f2
fix: key user does not exist #483
2024-08-02 20:14:45 +08:00
83981349d7
enhance: 2FA is no longer required for the first 3min of login
2024-07-29 11:00:54 +08:00
40d6a07514
chore: prepare v2.0.0-beta.29
2024-07-26 18:29:09 +08:00
11c733547f
feat: save settings required 2fa if enabled otp
2024-07-26 17:56:45 +08:00
1c1da92363
feat: deploy config to remote nodes #359
2024-07-26 13:53:38 +08:00
bcff00c47b
feat: disable enroll 2fa in demo mode
2024-07-23 23:00:17 +08:00
3a22861640
feat: 2FA authorization for web terminal
2024-07-23 20:35:32 +08:00
5abd9b75bb
feat: login 2fa
2024-07-23 17:28:13 +08:00
cff843b82b
feat: add login failed ban ip list
2024-07-21 15:35:23 +08:00
3b937ee0f4
feat: add ip whitelist
2024-07-20 10:37:19 +08:00
7d5104e550
fix: radial bar chart style broken in 1.3k-1.7k px window
2024-06-24 23:55:24 +08:00
Hintay