25 Commits
Author SHA1 Message Date
Alex Ababii c9345db7f3 feat(authguest): fix codacy styling 2026-10-16 10:07:22 +02:00
Alex Ababii 7eac7db12c feat(authguest): upd renewal flow to rely on sessionToken 2026-10-16 10:07:22 +02:00
Alex Ababii dc59c536da feat(authguest): upd error mappings 2026-10-16 10:07:22 +02:00
Alex Ababii ddf388a058 feat(authguest): nonce and pin ttl are now using the same value 2026-10-16 10:07:22 +02:00
Alex Ababii fd25c8c88d feat(authguest): removed session token verification on renew endpoint 2026-10-16 10:07:21 +02:00
Alex Ababii 57e72213f7 feat(authguest): per share nonce cookie name 2026-10-16 10:01:56 +02:00
Alex Ababii 9d2c3d40fd feat(authguest): fix codacy issues 2026-10-16 10:01:56 +02:00
Alex Ababii d8ab8dc7ee feat(authguest): extracted restrict access logic into separate package, backoff and quota limiters 2026-10-16 10:01:55 +02:00
Alex Ababii 42a411c11a feat(authguest): nonce check for verifyPin call 2026-10-16 09:59:28 +02:00
André Duffeck a230d7e193 Return ExpiresAt when issueing a session token 2026-10-15 10:34:00 +02:00
Alex Ababii 62f2125865 feat(authguest): renamed redeem to verify/token 2026-10-13 09:30:52 +02:00
Alex Ababii 6198c21357 feat(authguest): /redeem endpoint rename to /verify/token 2026-10-13 09:30:52 +02:00
Alex Ababii 7cfc601ddb feat(authguest): fix codacy issues 2026-10-13 09:30:52 +02:00
Alex Ababii b266546a45 feat(authguest): upd renewal logic to verify token and session, storage has now revisions 2026-10-13 09:30:52 +02:00
Alex Ababii 69d2f7f95d feat(authguest): updated README 2026-10-13 09:30:52 +02:00
Alex Ababii 5b7fd47e8e feat(authguest): moved redeem from storage layer to service layer 2026-10-13 09:30:52 +02:00
Alex Ababii 46dce34dd6 feat(authguest): atomic verify pin, rollback mechanism for renew 2026-10-13 09:30:52 +02:00
Alex Ababii 7a2639128d feat(authguest): verify pin endpoint 2026-10-13 09:30:52 +02:00
Alex Ababii 8e39386c60 feat(authguest): added renew endpoint with basic handling 2026-10-13 09:30:51 +02:00
André Duffeck 934232e838 Limit body size on unauthenticated redeem endpoint 2026-10-06 09:52:02 +02:00
André Duffeck e8c78f496d Do not leak information about tokens in errors 2026-10-06 09:52:02 +02:00
Alex Ababii a1a8221f68 feat(guestauth): global flag to disable the guest links feature 2026-10-06 08:08:26 +02:00
Alex Ababii 340851de70 feat(guestauth): updated redeem endpoint response and dependencies 2026-10-06 08:07:44 +02:00
Alex Ababii d0847093bf feat(guestauth): prefix for cookie 2026-10-06 08:07:44 +02:00
Alex Ababii cbf3ee8c0b feat(guestauth): guestauth service rename to auth-guest 2026-10-06 08:07:44 +02:00