Commit Graph

19 Commits

Author SHA1 Message Date
nexgen_mirrors 085f544b3c refactor(auth): use centralized config for API base URL
Replace inline SECUIRD_API constant definitions with imported config
module across all auth pages. This consolidates API URL configuration
into a single source of truth.
2026-04-07 00:48:53 +09:30
nexgen_mirrors 82b4056c41 refactor(auth): use API base URL directly for OIDC endpoints
Remove SECUIRD_OIDC constant that stripped /api/v1 from the base URL.
OIDC endpoints are now served under the API path directly.
2026-04-07 00:43:36 +09:30
nexgen_mirrors f653ee5ca7 refactor(auth): remove redirect_uri parameter from OAuth flow
Simplify OAuth login and account linking by removing the redirect_uri
parameter from initiateLogin and initiateLink functions. The backend
now handles callback URL construction internally.
2026-04-06 23:50:42 +09:30
JamesBhattarai 2dd6823b0f Fix: Verbose Syslog
Special email configured at backend to access these page via .env
2026-03-22 15:38:28 +05:45
JamesBhattarai 77e3a1fcec Fix: 2FA/passkey page redirect + org Setup context 2026-03-22 15:38:28 +05:45
JamesBhattarai 979b5a918e Chore: Rebranding Gatehouse to Secuird (UI) 2026-03-22 15:38:23 +05:45
JamesBhattarai 4c01fd0107 Feat: RBAC, Keys Extension, Invites
feat: org members page — invite users, cancel invites, change roles
feat: show pending invitations banner on profile page
feat: invite accept flow for existing users (no password needed)
feat: departments page updates
feat: SSH keys page — dept cert policy UI (expiry + extensions)
feat: wire up auth pages to real API (register, verify, reset, OIDC)
feat: CLI auth bridge — login page handles CLI token flow
feat: admin users — suspend/unsuspend, role badges, role filter
feat: add admin OAuth providers management page
feat: activity page — org-wide audit log view for admins
feat: add my memberships page
chore: add isOrgAdmin/isOrgMember to AuthContext, restrict sidebar
chore: update app routing and shared layout
2026-03-01 16:50:19 +05:45
JamesBhattarai b94053aebc Feat: Handle Oauth Callback/Bridge + Microsoft Oauth 2026-02-26 23:38:45 +05:45
nexgen_mirrors 5c2971e38d fix(auth): validate WebAuthn rp.id against current host
Add ensureValidRpId helper to validate and correct rp.id for WebAuthn
operations, preventing authentication failures when the configured rp.id
doesn't match the current hostname. Also add OAuthProvider type and fix
type casting in LoginPage.
2026-02-24 01:20:41 +10:30
coryHawkvelt e854bf801e google login works 2026-01-21 03:09:38 +10:30
coryHawkvelt e7c2c873c2 can link google accounts! 2026-01-20 15:54:11 +10:30
coryHawkvelt 87c143a332 Force mfa if enabled at login 2026-01-16 17:50:56 +10:30
coryHawkvelt 4ee3b81074 enabled policies 2026-01-16 17:31:25 +10:30
coryHawkvelt 71c58ddb60 fix(auth): ensure token storage before user state updates
- Store authentication tokens explicitly before setting user state in login
  and TOTP verification flows to prevent race conditions
- Add 'credentials: include' to WebAuthn endpoints for proper session
  cookie handling
- Add comprehensive debug logging throughout authentication flow to trace
  token lifecycle and API requests
- Update WebAuthn completeLogin to use fetch directly instead of request
  helper to properly handle session cookies
- Add allowedHosts configuration to Vite dev server
2026-01-16 11:35:21 +10:30
gpt-engineer-app[bot] f9d66f9625 Changes 2026-01-14 15:32:30 +00:00
gpt-engineer-app[bot] b77f2630a1 Changes 2026-01-14 07:21:55 +00:00
gpt-engineer-app[bot] c8fce6e4bd Changes 2026-01-11 05:54:30 +00:00
gpt-engineer-app[bot] 8fd8b30456 Changes 2026-01-06 15:33:03 +00:00
gpt-engineer-app[bot] 0104839c11 Changes 2026-01-06 14:46:23 +00:00