Commit Graph

14 Commits

Author SHA1 Message Date
JamesBhattarai 979b5a918e Chore: Rebranding Gatehouse to Secuird (UI) 2026-03-22 15:38:23 +05:45
JamesBhattarai 4c01fd0107 Feat: RBAC, Keys Extension, Invites
feat: org members page — invite users, cancel invites, change roles
feat: show pending invitations banner on profile page
feat: invite accept flow for existing users (no password needed)
feat: departments page updates
feat: SSH keys page — dept cert policy UI (expiry + extensions)
feat: wire up auth pages to real API (register, verify, reset, OIDC)
feat: CLI auth bridge — login page handles CLI token flow
feat: admin users — suspend/unsuspend, role badges, role filter
feat: add admin OAuth providers management page
feat: activity page — org-wide audit log view for admins
feat: add my memberships page
chore: add isOrgAdmin/isOrgMember to AuthContext, restrict sidebar
chore: update app routing and shared layout
2026-03-01 16:50:19 +05:45
JamesBhattarai b94053aebc Feat: Handle Oauth Callback/Bridge + Microsoft Oauth 2026-02-26 23:38:45 +05:45
nexgen_mirrors 5c2971e38d fix(auth): validate WebAuthn rp.id against current host
Add ensureValidRpId helper to validate and correct rp.id for WebAuthn
operations, preventing authentication failures when the configured rp.id
doesn't match the current hostname. Also add OAuthProvider type and fix
type casting in LoginPage.
2026-02-24 01:20:41 +10:30
coryHawkvelt e854bf801e google login works 2026-01-21 03:09:38 +10:30
coryHawkvelt e7c2c873c2 can link google accounts! 2026-01-20 15:54:11 +10:30
coryHawkvelt 87c143a332 Force mfa if enabled at login 2026-01-16 17:50:56 +10:30
coryHawkvelt 4ee3b81074 enabled policies 2026-01-16 17:31:25 +10:30
coryHawkvelt 71c58ddb60 fix(auth): ensure token storage before user state updates
- Store authentication tokens explicitly before setting user state in login
  and TOTP verification flows to prevent race conditions
- Add 'credentials: include' to WebAuthn endpoints for proper session
  cookie handling
- Add comprehensive debug logging throughout authentication flow to trace
  token lifecycle and API requests
- Update WebAuthn completeLogin to use fetch directly instead of request
  helper to properly handle session cookies
- Add allowedHosts configuration to Vite dev server
2026-01-16 11:35:21 +10:30
gpt-engineer-app[bot] f9d66f9625 Changes 2026-01-14 15:32:30 +00:00
gpt-engineer-app[bot] b77f2630a1 Changes 2026-01-14 07:21:55 +00:00
gpt-engineer-app[bot] c8fce6e4bd Changes 2026-01-11 05:54:30 +00:00
gpt-engineer-app[bot] 8fd8b30456 Changes 2026-01-06 15:33:03 +00:00
gpt-engineer-app[bot] 0104839c11 Changes 2026-01-06 14:46:23 +00:00