Commit graph

110 commits

Author SHA1 Message Date
miloschwartz
5c04b1e14a
add site targets, client resources, and auto login 2025-08-14 18:24:21 -07:00
Owen
1351fb6689
Merge branch 'feature/form-signup-improvements' of github.com:adrianeastles/pangolin into adrianeastles-feature/form-signup-improvements 2025-08-12 21:40:55 -07:00
Owen
4f3cd71e1e
Merge branch 'feature/setup-token-security' of github.com:adrianeastles/pangolin into adrianeastles-feature/setup-token-security 2025-08-12 21:12:55 -07:00
Adrian Astles
69baa6785f feat: Add setup token security for initial server setup
- Add setupTokens database table with proper schema
- Implement setup token generation on first server startup
- Add token validation endpoint and modify admin creation
- Update initial setup page to require setup token
- Add migration scripts for both SQLite and PostgreSQL
- Add internationalization support for setup token fields
- Implement proper error handling and logging
- Add CLI command for resetting user security keys

This prevents unauthorized access during initial server setup by requiring
a token that is generated and displayed in the server console.
2025-08-03 21:17:18 +08:00
T Aviss
481714f095 Fix for issues with binding ports other than 80/443
server/routers/badger/verifySession.ts : verifyResourceSession() updated code behind "cleanHost" var to a regex which strips the trailing :port for any port (rather than a string match for 80/443)
src/app/auth/resource/[resourceId]/page.tsx : ResourceAuthPage() added a secondary match for serverResourceHost and redirectHost that accounts for ports
server/routers/badger/exchangeSession.ts : Updated exchangeSession() to use the same "cleanHost" type var (with port-stripping) as in verifyResourceSession(), replaced references to "host" with "cleanHost"
2025-07-30 22:16:46 -07:00
Adrian Astles
350485612e This improves the user experience by automatically filling the email field
and preventing users from changing the email they were invited with.

- Update invite link generation to include email parameter in URL
- Modify signup form to pre-fill and lock email field when provided via invite
- Update invite page and status card to preserve email through redirect chain
- Ensure existing invite URLs continue to work without breaking changes
2025-07-25 22:46:40 +08:00
Adrian Astles
df31c13912 added real-time password validation to signup form. 2025-07-25 21:59:25 +08:00
miloschwartz
114ce8997f
add tos and pp consent 2025-07-21 16:57:21 -07:00
miloschwartz
d870a49381
change domain picker description and fix metadata title 2025-07-17 12:05:08 -07:00
miloschwartz
ccdcda7f1d
add screenshots and minor fixes 2025-07-16 22:18:11 -07:00
miloschwartz
19d54778f5
add branding logo component 2025-07-15 16:24:16 -07:00
Owen
3dc79da2fa
Merge branch 'dev' into clients-pops-dev 2025-07-14 16:59:00 -07:00
miloschwartz
915ccdc007
server admin enforce 2fa per user 2025-07-13 21:58:37 -07:00
Owen
98a261e38c
Pull up downstream changes 2025-07-13 21:57:24 -07:00
J. Newing
2a6298e9eb Admins can enable 2FA
Added the feature for admins to force 2FA on accounts. The next time the
user logs in they will have to setup 2FA on their account.
2025-07-08 10:21:24 -04:00
miloschwartz
d194e230de
option to log out if on verify email screen 2025-06-25 16:44:23 -04:00
miloschwartz
d03f45279c
remove server admin from config and add onboarding ui 2025-06-19 22:11:05 -04:00
Marvin
a6348a3e28 Merge remote-tracking branch 'upstream/dev' into feature-i18n 2025-06-06 06:03:55 +00:00
miloschwartz
f0cb65f65c
dont import db in nextjs 2025-06-05 14:44:34 -04:00
Marvin
dd7b91f770 Merge remote-tracking branch 'upstream/dev' into feature-i18n 2025-06-05 04:41:28 +00:00
miloschwartz
2cca561e51
support postgresql as database option 2025-06-04 12:02:07 -04:00
Marvin
e8870cf174 Merge remote-tracking branch 'upstream/dev' into feature-i18n 2025-06-04 09:01:37 +00:00
miloschwartz
6dd8db5cd1
add new logo 2025-05-29 12:09:49 -04:00
Lokowitz
f07e8d08c3 update all 2025-05-25 19:01:20 +00:00
vlalx
ea24759bb3
I18n components (#27)
* New translation keys in en-US locale

* New translation keys in de-DE locale

* New translation keys in fr-FR locale

* New translation keys in it-IT locale

* New translation keys in pl-PL locale

* New translation keys in pt-PT locale

* New translation keys in tr-TR locale

* Move into function

* Replace string matching to boolean check

* Add FIXIT in UsersTable

* Use localization for size units

* Missed and restored translation keys

* fixup! New translation keys in tr-TR locale

* Add translation keys in components
2025-05-25 16:41:38 +02:00
Lokowitz
d9ee40c898 more fixes 2025-05-17 20:04:56 +00:00
Lokowitz
eff812eaa8 first fixes 2025-05-17 18:17:22 +00:00
vlalx
b8ed5ac1c5
I18n auth (#23)
* New translation keys in en-US locale

* New translation keys in de-DE locale

* New translation keys in fr-FR locale

* New translation keys in it-IT locale

* New translation keys in pl-PL locale

* New translation keys in pt-PT locale

* New translation keys in tr-TR locale

* Add translation keys in app/auth

* Fix build

---------

Co-authored-by: Lokowitz <marvinlokowitz@gmail.com>
2025-05-17 18:11:56 +02:00
Lokowitz
6f54e3da9e New translations en-us.json (German) 2025-05-17 15:39:40 +00:00
miloschwartz
5b0200154a
add feature parity 2025-05-13 11:09:38 -04:00
miloschwartz
f66fb7d4a3
fix justification for profile icon 2025-05-09 17:09:22 -04:00
Lokowitz
7eb08474ff Add first i18n stuff 2025-05-04 15:11:42 +00:00
miloschwartz
4819f410e6
add license system and ui 2025-04-27 13:03:00 -04:00
miloschwartz
4dba75f913
obscure pin code input closes #580 2025-04-23 16:33:55 -04:00
miloschwartz
e2f056e6ca
add idp to profile dropdown 2025-04-20 15:50:17 -04:00
miloschwartz
8fa719181a
show list of idp on login 2025-04-18 21:59:58 -04:00
miloschwartz
aa3b527f67
add validate callback loading state and encryption 2025-04-14 20:56:45 -04:00
miloschwartz
53be2739bb
successful log in loop poc 2025-04-13 18:29:23 -04:00
miloschwartz
7556a59e11
Merge branch 'dev' into auth-providers 2025-04-13 14:49:02 -04:00
miloschwartz
419e576a3e
adjust border 2025-04-13 14:30:19 -04:00
miloschwartz
480a5f648d
testing oidc callback 2025-04-12 15:44:26 -04:00
miloschwartz
0e65f8c921
check resource id on verify access token 2025-04-06 13:08:55 -04:00
miloschwartz
74d6b3d902
shorten share links and add migration 2025-04-04 22:58:01 -04:00
miloschwartz
cdc415079c
add supporer key program 2025-03-20 22:16:02 -04:00
miloschwartz
cc6800c791
add migration script 2025-03-04 11:13:34 -05:00
miloschwartz
759434e9f8
more visual enhancements and update readme 2025-03-01 23:03:42 -05:00
miloschwartz
20f1a6372b
small visual improvements 2025-02-26 21:24:35 -05:00
miloschwartz
ff37e07ce6
make cookies work with multi-domain 2025-02-23 23:04:01 -05:00
Milo Schwartz
8165051dd8
fix toast dismiss causing components to rerender and clean up rules text 2025-02-10 21:35:06 -05:00
Owen Schwartz
f4ae2188e0
Fix typo courtesy of Discord @kazak 2025-01-29 09:34:55 -05:00