KernelDeimos
c55b1e4680
Remove verification requirement on contact us form
2024-05-16 19:08:51 -04:00
KernelDeimos
e3f57ee20e
Add path builder
2024-05-16 19:02:58 -04:00
KernelDeimos
5031cea040
Update _default.js for deployment purposes
2024-05-16 18:55:59 -04:00
KernelDeimos
49b257ecff
fix(security): Move token for socket.io to request body
...
Currently this commit breaks websocket events and needs to
be updated.
2024-05-16 17:58:44 -04:00
KernelDeimos
f042b095f1
Fix 8688gxkuj
2024-05-16 17:25:41 -04:00
KernelDeimos
691c8f1436
Add locking to save_account
2024-05-15 18:22:54 -04:00
Eric Dubé
b72e5b7e02
Merge pull request #401 from HeyPuter/eric/service-patches
...
Allow patching services
2024-05-15 15:47:14 -04:00
KernelDeimos
c70e378973
Add error id for expired auth tokens
2024-05-15 15:42:00 -04:00
KernelDeimos
21444daefb
Add jsdoc comments to registerService and patchService
2024-05-15 15:41:37 -04:00
KernelDeimos
2e0d7361cb
Add method to patch services
2024-05-15 15:32:18 -04:00
Eric Dubé
6e0b6d84d2
Merge pull request #400 from AtkinsSJ/fix-apierror-includes
...
fix: Correct APIError imports
2024-05-15 13:51:04 -04:00
Sam Atkins
062e23b5c9
fix: Correct APIError imports
...
APIError is the only thing exported from its file, so we must not wrap
it in {}.
2024-05-15 17:47:15 +01:00
Sam Atkins
a8160a8cdc
fix: Add missing file extension to 0009_app-prefix-fix.sql in DB init
2024-05-15 10:18:28 +01:00
KernelDeimos
0b093dd57e
Revoke other sessions when password is changed
2024-05-14 19:40:57 -04:00
KernelDeimos
923d5878c3
Prevent enable of 2FA without configure
2024-05-14 17:33:14 -04:00
KernelDeimos
800aef1942
Implement anti-CSRF for logout
2024-05-13 20:40:27 -04:00
KernelDeimos
da7f73baa6
Add AntiCSRFService
2024-05-13 19:08:51 -04:00
KernelDeimos
afb9d866b5
fix: Fix phoenix app prefix and TokenService test
2024-05-13 18:17:39 -04:00
KernelDeimos
c2f1694107
Require password entry to disable 2FA
2024-05-13 16:00:07 -04:00
KernelDeimos
23215bd6f7
Move change_email/start to password-protected endpoint
2024-05-13 16:00:07 -04:00
KernelDeimos
1493cacb69
Add rate-limiting to new password change endpoint
2024-05-13 16:00:07 -04:00
KernelDeimos
9076fddc0d
Add new password change endpoint
2024-05-13 16:00:07 -04:00
KernelDeimos
a89c9d59cf
Add UserProtectedEndpointsService
2024-05-13 16:00:07 -04:00
KernelDeimos
15dec21118
doc(backend): Document the boot sequence
...
Now that the boot sequence is better formalized it may be documented.
2024-05-13 16:00:07 -04:00
KernelDeimos
d800b12569
refactor(backend): Trigger webserver events in webserver
...
We were triggering webserver events in Kernel. This change improves
adherence to separation-of-concerns and ensures event cascading is
working as expected. This also better formalizes the boot sequence.
2024-05-13 01:05:49 -04:00
Eric Dubé
3992fe1a45
Merge pull request #384 from AtkinsSJ/progress-dialogs
...
refactor: Replace several existing progress dialogs with one configurable one
2024-05-10 12:25:32 -04:00
Eric Dubé
17e08cafce
Merge pull request #380 from AtkinsSJ/eslint-ci
...
Run ESLint on CI
2024-05-10 12:24:31 -04:00
KernelDeimos
cd2daa1910
Require email verification for contact form
2024-05-09 19:40:34 -04:00
KernelDeimos
8b6bbe003d
fix(security) Disable 2FA configure if 2FA is enabled
2024-05-09 18:04:58 -04:00
Sam Atkins
f3269693de
Stop dumping binary data to the console
...
This was freaking out and freezing the Puter server, and my entire
terminal app. XD
2024-05-09 18:28:39 +01:00
KernelDeimos
df24c663df
Invalidate email confirmation on password change
2024-05-08 22:28:41 -04:00
KernelDeimos
45e7f162a2
Add password change notification
2024-05-08 16:01:20 -04:00
Sam Atkins
8c70efa058
Suppress remaining eslint errors
...
These two seem like bugs but are unclear to me how to fix, so I've added
FIXMEs.
/puter/packages/backend/src/routers/kvstore/clearItems.js
41:32 error 'DB_MODE_WRITE' is not defined no-undef
/puter/packages/backend/src/routers/whoami.js
104:35 error 'db' is not defined no-undef
2024-05-08 18:53:36 +01:00
KernelDeimos
5890b7e7bf
Disable password reset token when email or password is changed
2024-05-07 20:18:11 -04:00
KernelDeimos
d20249f29a
Send email notifications when 2FA state changes
2024-05-06 21:13:00 -04:00
KernelDeimos
7f3e2852c6
Add rate limits
2024-05-06 16:12:54 -04:00
KernelDeimos
7fce223a6d
Fix OTP test endpoint
2024-05-06 15:40:34 -04:00
KernelDeimos
a628358c9f
Fix OTP time window
2024-05-06 15:02:14 -04:00
KernelDeimos
918eb3bb67
Put otpauth back on 9.2.4
2024-05-06 02:10:22 -04:00
KernelDeimos
ecae1997aa
Maybe this??
2024-05-06 01:58:55 -04:00
KernelDeimos
e4c7caa8ea
Worth a try
2024-05-06 01:54:02 -04:00
KernelDeimos
00c8ece07e
Finish recovery codes
2024-05-06 00:02:46 -04:00
KernelDeimos
5cbe256120
Add missing part of previous commit
2024-05-06 00:02:46 -04:00
KernelDeimos
a2a8f9de74
Fix cache state
2024-05-06 00:02:46 -04:00
KernelDeimos
3e380ba844
Add otp test endpoint and next wizard step
2024-05-06 00:02:46 -04:00
KernelDeimos
2681a78501
Use username as otp label
2024-05-06 00:02:46 -04:00
KernelDeimos
3bf7737790
Add recovery codes
2024-05-06 00:02:46 -04:00
KernelDeimos
455d3946d6
Add checkboxes and cancel action for 2FA setup
2024-05-06 00:02:46 -04:00
KernelDeimos
2dfecb5287
Add 2fa setting and complete login flow
2024-05-06 00:02:46 -04:00
KernelDeimos
d7c5c37cf8
Implement backend for 2FA
2024-05-06 00:02:46 -04:00
