Commit Graph
29 Commits
Author SHA1 Message Date
Akhil Mohan f1a291a52a feat(rbac): fixed merge conflicts and resolved some more issues with permission checks 2023-09-08 21:22:36 +05:30
Akhil Mohan 549121f44e feat(rbac): added new validation to all routes and permission check to most 2023-09-08 21:22:36 +05:30
Joel Biddle 3e36adcf5c Removed all references to commonPasswords & the data file. This api route can be deprecated in favor of the client-side secure call to the haveIBeenPwnd password API. Further the datafile contains no passwords that meet the minimum password criteria. 2023-08-22 23:30:24 +10:00
Tuan Dang 142fcf0a01 Finish preliminary v2 audit logs 2023-08-05 16:55:06 +07:00
Tuan Dang 8d82e2d0fc Replace generic error with BadRequestError for missing refresh token in exchange 2023-06-22 18:08:23 +07:00
Khoa Le 9d33e4756b Add eslint rule and fix as many issues as possible 2023-06-19 23:42:04 -04:00
Tuan Dang 8c0d643a37 Fix merge conflicts 2023-06-07 12:58:24 +01:00
Tuan Dang 5667e47b31 Add default rely on Cloudflare for IP addresses 2023-06-07 00:50:25 +01:00
Tuan Dang a8ed187443 Add check for most common passwords 2023-06-07 00:06:35 +01:00
Tuan Dang 846f5c6680 Upgraded JWT invalidation/session logic to separate TokenVersion model. 2023-06-06 16:36:52 +01:00
Tuan Dang b9dad5c3f0 Begin preliminary tokenVersion impl 2023-06-06 11:25:08 +01:00
Tuan Dang 5a1b6acc93 Fix merge conflicts with auth changes 2023-06-05 21:27:01 +01:00
Tuan Dang 5f5ed5d0a9 Change export convention for helper functions 2023-06-05 21:00:23 +01:00
Spelchure bfee0a6d30 feat: remove try-catch blocks for handling errors in middleware 2023-06-05 21:15:35 +03:00
Tuan Dang 0c18bd71c4 Implement preliminary pentest remediations 2023-06-05 00:44:10 +01:00
Sheen Capadngan fac4968193 moved oauth controller endpoints to auth 2023-05-24 23:44:30 +08:00
Sheen Capadngan f703ee29e5 implemented comments 2023-05-03 18:58:32 +08:00
Sheen Capadngan 69472514af Merge branch 'main' into feature/google-signin-signup-integration 2023-04-27 01:46:26 +08:00
Sheen Capadngan 007e8c4442 initial setup for google signin signup integration 2023-04-25 23:47:46 +08:00
Tuan Dang e1bf31b371 Update envars to new node SDK format 2023-04-22 16:20:33 +03:00
Maidul Islam 83ddba29e2 conditionally set https 2023-04-13 09:03:23 -07:00
Tuan Dang a6c8638345 Refactor infisical-node to config file for birds eye view of envars 2023-03-15 00:09:40 +07:00
Tuan Dang 7fd06e36bc Complete preliminary addition of infisical-node to support service tokens 2023-03-14 16:38:30 +07:00
Tuan Dang 2d6d32923d Finish alert for new device login detection 2023-02-21 18:01:26 +07:00
Tuan Dang e53fd110f6 Checkpoint weaving frontend and backend MFA 2023-02-13 12:29:36 +07:00
Tuan Dang ca688764a3 Add login/logout logs 2023-02-01 11:56:38 +07:00
Maidul Islam ae0ee727fa Make backend login stateless 2023-01-25 20:09:57 -08:00
Tuan Dang 9d4ea2dcda Continue api-reference docs 2023-01-13 15:04:46 +07:00
Tuan Dang 229fef8874 Create route and controller v1/v2 folder structure separation 2022-12-26 21:02:39 -05:00