Commit Graph
23 Commits
Author SHA1 Message Date
Tuan Dang 444ce9508d Resolve PR review items, moved identity auth logic into separate controller, etc. 2023-12-10 14:15:25 +07:00
Tuan Dang 50ef23e8a0 Restructure MIs to more generic Identity 2023-12-09 22:18:38 +07:00
Akhil Mohan f1a291a52a feat(rbac): fixed merge conflicts and resolved some more issues with permission checks 2023-09-08 21:22:36 +05:30
Akhil Mohan 549121f44e feat(rbac): added new validation to all routes and permission check to most 2023-09-08 21:22:36 +05:30
BlackMagiq 76cf79d201 Merge pull request #885 from ragnarbull/ragnarbull-auth-pwd-fixes
Password fixes - enforce max length, add checks (pwd breach, PII, low entropy), improved UX, deprecate common-passwords api
2023-08-28 11:33:57 +01:00
Tuan Dang 4e1abc6eba Add login email lowercasing to backend 2023-08-23 18:02:18 +07:00
Joel Biddle 3e36adcf5c Removed all references to commonPasswords & the data file. This api route can be deprecated in favor of the client-side secure call to the haveIBeenPwnd password API. Further the datafile contains no passwords that meet the minimum password criteria. 2023-08-22 23:30:24 +10:00
Tuan Dang 11833ccf0f Note endpoints to deprecate 2023-08-09 11:32:57 +07:00
Tuan Dang 142fcf0a01 Finish preliminary v2 audit logs 2023-08-05 16:55:06 +07:00
Tuan Dang fd3cf70e13 Add Google SSO 2023-07-21 17:48:36 +07:00
Khoa Le 9d33e4756b Add eslint rule and fix as many issues as possible 2023-06-19 23:42:04 -04:00
Tuan Dang a8ed187443 Add check for most common passwords 2023-06-07 00:06:35 +01:00
Tuan Dang 846f5c6680 Upgraded JWT invalidation/session logic to separate TokenVersion model. 2023-06-06 16:36:52 +01:00
Sheen Capadngan fac4968193 moved oauth controller endpoints to auth 2023-05-24 23:44:30 +08:00
Sheen Capadngan f703ee29e5 implemented comments 2023-05-03 18:58:32 +08:00
Sheen Capadngan dfb84e9932 developed initial version of new login page 2023-04-27 23:10:27 +08:00
Sheen Capadngan 2dd1570200 updated use of environment variables to utilize await 2023-04-27 02:00:16 +08:00
Sheen Capadngan 007e8c4442 initial setup for google signin signup integration 2023-04-25 23:47:46 +08:00
Tuan Dang 5bbe09e4be Substitute hardcoded auth modes for variables 2023-04-07 16:50:05 +03:00
Tuan Dang 5cadb9e2f9 Finish MFA v1 and refactor all tokens into separate TokenService with modified collection 2023-01-23 22:10:15 +07:00
Tuan Dang 89697df85e Increase rate limits for API 2023-01-16 22:09:58 +07:00
Tuan Dang 7e4bf7f44b Continue developing service token v2 2023-01-01 07:10:47 +07:00
Tuan Dang 229fef8874 Create route and controller v1/v2 folder structure separation 2022-12-26 21:02:39 -05:00