Commit graph

19 commits

Author SHA1 Message Date
Sérgio Salgado
5a44216547 fix: session middleware order 2021-11-16 16:46:13 +00:00
Taranto
ba4117173e chore: undo $ prepend on queries 2021-07-22 12:15:45 +01:00
csrapr
e6059be8d2 Chore: refactor to use new schema changing queries 2021-07-22 12:15:45 +01:00
Sérgio Salgado
aa7252dfce fix: added variables to the constants file.
fix: updated sql queries with constants
2021-05-03 23:00:41 +01:00
Sérgio Salgado
15769cd1bf feat: implement argon2 and changed session data type to timestamptz 2021-05-03 23:00:41 +01:00
Sérgio Salgado
357fe75427 fix: temp two factor secret checking on two factor reset 2021-05-03 23:00:41 +01:00
Sérgio Salgado
928caaf167 fix: temporary store of two factor secret to check against 2021-05-03 23:00:41 +01:00
Sérgio Salgado
19138c2d46 fix: redundant authentication code 2021-05-03 23:00:41 +01:00
Sérgio Salgado
bbc37c0202 fix: multiple small fixes across auth 2021-05-03 23:00:41 +01:00
Sérgio Salgado
9fa97725ec feat: auto userdata fetch
fix: gql directives and overall minor fixes
2021-05-03 23:00:41 +01:00
Sérgio Salgado
3f6c0e6037 fix: database constraint on auth_tokens 2021-05-03 23:00:41 +01:00
Sérgio Salgado
c00249586d fix: security flaw on auth tokens, error handling 2021-05-03 23:00:41 +01:00
Sérgio Salgado
40974dd501 fix: naming and redundancy issues 2021-05-03 23:00:41 +01:00
Sérgio Salgado
eb91d882c7 fix: remove user_tokens from _override_by customer fields 2021-05-03 23:00:41 +01:00
Sérgio Salgado
6396eb8247 fix: sql casing 2021-05-03 23:00:41 +01:00
Sérgio Salgado
fded22f39a feat: add user management screen
feat: login screen

fix: login routing and layout

feat: add users migration

feat: passport login strategy

fix: users migration

feat: simple authentication

fix: request body

feat: JWT authorization

feat: 2fa step on login

feat: 2fa flow

feat: add rememberme to req body

fix: hide 2fa secret from jwt

fix: block login access to logged in user

fix: rerouting to wizard

refactor: login screen

feat: setup 2fa state on login

feat: 2fa secret qr code

fix: remove jwt from 2fa secret

fix: wizard redirect after login

fix: 2fa setup flow

fix: user id to uuid

feat: user roles

feat: user sessions and db persistence

feat: session saving on DB and cookie

refactor: unused code

feat: cookie auto renew on request

feat: get user data endpoint

fix: repeated requests

feat: react routing

fix: private routes

refactor: auth

feat: sessions aware of ua and ip

feat: sessions on gql

feat: session management screen

feat: replace user_tokens usage for users

feat: user deletion also deletes active sessions

feat: remember me alters session cookie accordingly

feat: last session by all users

fix: login feedback

fix: page loading UX

feat: routes based on user role

feat: header aware of roles

feat: reset password

fix: reset password endpoint

feat: handle password change

feat: reset 2FA

feat: user role on management screen

feat: change user role

fix: user last session query

fix: context

fix: destroy own session

feat: reset password now resets sessions

feat: reset 2fa now resets sessions

refactor: user data

refactor: user management screen

feat: user enable

feat: schema directives

fix: remove schema directive temp

feat: create new users

feat: register endpoint

feat: modals for reset links

fix: directive Date errors

feat: superuser directive

feat: create user url modal

fix: user management layout

feat: confirmation modals

fix: info text

feat: 2fa input component

feat: code input on 2fa state

feat: add button styling

feat: confirmation modal on superuser action

feat: rework 2fa setup screen

feat: rework reset 2fa screen

fix: session management screen

fix: user management screen

fix: blacklist roles

chore: migrate old customer values to new columns

fix: value migration

fix: value migration

refactor: remove old code
2021-05-03 23:00:41 +01:00
goga-m
a731ec7a03 Add comments 2017-12-13 16:31:07 +02:00
goga-m
c77bb53f8f Refactor customers API
* Use lodash camelize
* Modify enhanceOverrideFields (fp)
* Fix for sql timestamp
* Fetch all existing users at once in populateOverrideUsernames
* Modify populateOverrideUsernames (fp)
* Break format function into computeStatus, camelize
2017-12-13 16:31:07 +02:00
goga-m
e351d1b495 Add users API 2017-12-13 16:31:07 +02:00