Commit Graph

29 Commits

Author SHA1 Message Date
nexgen_mirrors e5fbbf521d refactor(auth): extract SocialLoginButtons into reusable component
Extract social login buttons (Passkey, Google, GitHub, Microsoft) from
LoginPage into a dedicated SocialLoginButtons component. This enables
reuse in OIDCLoginPage and improves code maintainability.
2026-04-20 13:13:31 +09:30
nexgen_mirrors cb62079b4f feat(marketing): add contact form submission and testing setup
- Add contact API endpoint for demo requests and sales enquiries
- Implement functional contact forms on Demo and Pricing pages with honeypot spam protection
- Update footer layout: remove Company section, add contact email
- Update self-hosted FAQ to mention open source with GitHub links
- Add vitest and testing-library dependencies
- Add tests for MarketingLayout and PricingPage components
- Remove placeholder external-auth test file
2026-04-18 00:33:02 +09:30
JamesBhattarai 56a70cd83d Fix: Previously after join the invite link would navigate to create org.
Refresh the auth context and check org so newly joined org is reflected.
2026-04-08 11:45:13 +05:45
nexgen_mirrors f3e0f806cc fix(auth): resolve undefined SECUIRD_API in CLI token exchange
Replace remaining SECUIRD_API reference with config.api.baseUrl in
LoginPage.tsx. This fixes the 'SECUIRD_API is not defined' error
when accessing /login?cli_token=... during CLI authentication flow.
2026-04-07 10:25:07 +09:30
nexgen_mirrors 085f544b3c refactor(auth): use centralized config for API base URL
Replace inline SECUIRD_API constant definitions with imported config
module across all auth pages. This consolidates API URL configuration
into a single source of truth.
2026-04-07 00:48:53 +09:30
nexgen_mirrors 82b4056c41 refactor(auth): use API base URL directly for OIDC endpoints
Remove SECUIRD_OIDC constant that stripped /api/v1 from the base URL.
OIDC endpoints are now served under the API path directly.
2026-04-07 00:43:36 +09:30
nexgen_mirrors f653ee5ca7 refactor(auth): remove redirect_uri parameter from OAuth flow
Simplify OAuth login and account linking by removing the redirect_uri
parameter from initiateLogin and initiateLink functions. The backend
now handles callback URL construction internally.
2026-04-06 23:50:42 +09:30
JamesBhattarai 2dd6823b0f Fix: Verbose Syslog
Special email configured at backend to access these page via .env
2026-03-22 15:38:28 +05:45
JamesBhattarai 77e3a1fcec Fix: 2FA/passkey page redirect + org Setup context 2026-03-22 15:38:28 +05:45
JamesBhattarai 979b5a918e Chore: Rebranding Gatehouse to Secuird (UI) 2026-03-22 15:38:23 +05:45
JamesBhattarai de869ec1f2 Feat(Chore, Fix): Admin Privilege
Added OIDC Web Page Flow
Admin can  add/reset password
Admin can remove users'/members mfa/2fa, unlink account from  oauth provider
Chore: Text changes (Forgot Pass, CA)
2026-03-04 18:43:12 +05:45
JamesBhattarai b97937f080 Feat(Fix): Multi Org, Suspension, User Detail
Multi Org switch, members suspend/unsuspend status, delete account, next serial, show email in user member search
2026-03-02 23:55:47 +05:45
JamesBhattarai f1a8e313fc Feat(Fix): User & Org Setup Initial (Invite + Create on own) & Chore: UI 2026-03-01 20:11:22 +05:45
JamesBhattarai 4c01fd0107 Feat: RBAC, Keys Extension, Invites
feat: org members page — invite users, cancel invites, change roles
feat: show pending invitations banner on profile page
feat: invite accept flow for existing users (no password needed)
feat: departments page updates
feat: SSH keys page — dept cert policy UI (expiry + extensions)
feat: wire up auth pages to real API (register, verify, reset, OIDC)
feat: CLI auth bridge — login page handles CLI token flow
feat: admin users — suspend/unsuspend, role badges, role filter
feat: add admin OAuth providers management page
feat: activity page — org-wide audit log view for admins
feat: add my memberships page
chore: add isOrgAdmin/isOrgMember to AuthContext, restrict sidebar
chore: update app routing and shared layout
2026-03-01 16:50:19 +05:45
JamesBhattarai 62f767474b Feat(Fix): SSH Keys-Expiry+Log; Department+Principal Link; CA Keys mgmt;
- Fix Login nav to /profile or /
2026-02-28 23:35:32 +05:45
JamesBhattarai b94053aebc Feat: Handle Oauth Callback/Bridge + Microsoft Oauth 2026-02-26 23:38:45 +05:45
nexgen_mirrors 5c2971e38d fix(auth): validate WebAuthn rp.id against current host
Add ensureValidRpId helper to validate and correct rp.id for WebAuthn
operations, preventing authentication failures when the configured rp.id
doesn't match the current hostname. Also add OAuthProvider type and fix
type casting in LoginPage.
2026-02-24 01:20:41 +10:30
coryHawkvelt e854bf801e google login works 2026-01-21 03:09:38 +10:30
coryHawkvelt e7c2c873c2 can link google accounts! 2026-01-20 15:54:11 +10:30
coryHawkvelt 87c143a332 Force mfa if enabled at login 2026-01-16 17:50:56 +10:30
coryHawkvelt 4ee3b81074 enabled policies 2026-01-16 17:31:25 +10:30
coryHawkvelt 71c58ddb60 fix(auth): ensure token storage before user state updates
- Store authentication tokens explicitly before setting user state in login
  and TOTP verification flows to prevent race conditions
- Add 'credentials: include' to WebAuthn endpoints for proper session
  cookie handling
- Add comprehensive debug logging throughout authentication flow to trace
  token lifecycle and API requests
- Update WebAuthn completeLogin to use fetch directly instead of request
  helper to properly handle session cookies
- Add allowedHosts configuration to Vite dev server
2026-01-16 11:35:21 +10:30
gpt-engineer-app[bot] f9d66f9625 Changes 2026-01-14 15:32:30 +00:00
gpt-engineer-app[bot] b77f2630a1 Changes 2026-01-14 07:21:55 +00:00
gpt-engineer-app[bot] c8fce6e4bd Changes 2026-01-11 05:54:30 +00:00
gpt-engineer-app[bot] 8fd8b30456 Changes 2026-01-06 15:33:03 +00:00
gpt-engineer-app[bot] 596c77a6da Changes 2026-01-06 15:17:10 +00:00
gpt-engineer-app[bot] 8c2e001d1e Changes 2026-01-06 14:59:47 +00:00
gpt-engineer-app[bot] 0104839c11 Changes 2026-01-06 14:46:23 +00:00