69 Commits

Author SHA1 Message Date
admin 974e05b995 changed to dev agent for now 2026-03-24 10:47:58 +08:00
admin efdca5ecb1 Merge branch 'main' of https://collab-core.psa.gov.ph/psa/uess/authn 2026-03-24 10:44:39 +08:00
admin c1229122eb added jenkinsfile 2026-03-24 10:44:36 +08:00
admin a205c481d2 Add new file 2026-03-24 10:39:35 +08:00
admin ce00055fd6 Merge branch 'rj' into 'main'
renamed all instances of "id" to "jwt_sessions_id" to match db column name.

See merge request psa/uess/authn!7
2026-03-17 13:16:50 +08:00
admin c76e64f87c fixed 2026-03-16 09:27:08 +08:00
admin ed1ea2ba42 renamed all instances of "id" to "jwt_sessions_id" to match db column name. 2026-03-14 09:37:06 +08:00
admin 4cd58e4fed Merge branch 'rj' into 'main'
Refactored refresh token endpoint

See merge request psa/uess/authn!6
2026-03-13 16:57:47 +08:00
admin b6ab8d3187 Refactored refresh token endpoint 2026-03-13 16:51:44 +08:00
admin bd7887874d Merge branch 'rj' into 'main'
added refreshtoken to callback params

See merge request psa/uess/authn!5
2026-03-12 13:33:46 +08:00
admin aa08fff660 only implemented refresh_token as params for requests from mobile 2026-03-12 13:28:26 +08:00
admin 71adf3d7d3 added refreshtoken to callback params 2026-03-12 11:18:58 +08:00
admin fa1d1623c3 updated 2026-03-05 10:33:04 +08:00
admin 30c91cf5c8 added fetching of origin in auth login 2026-03-05 10:09:12 +08:00
admin 8f51faeb12 added project status in project metadata 2026-03-05 09:10:06 +08:00
admin 64809792a2 Merge branch 'rsa' into 'main'
added more error logs

See merge request psa/uess/authn!4
2026-02-27 10:20:00 +08:00
admin b76eba9bf0 added more error logs 2026-02-27 10:19:24 +08:00
admin b68d706a46 Merge branch 'rsa' into 'main'
added logging for access token expiration

See merge request psa/uess/authn!3
2026-02-27 09:34:19 +08:00
admin acebd04780 added logging for access token expiration 2026-02-27 09:34:05 +08:00
admin ed8ce29038 Merge branch 'rsa' into 'main'
fix(jwt): make role claims consistent with /me and correct additional_role_id

See merge request psa/uess/authn!2
2026-02-26 10:45:56 +08:00
admin 2f9ac51570 fix(jwt): make role claims consistent with /me and correct additional_role_id
derive JWT roles from FetchUserByEmail (not GetRoleIDsFromEmail)
keep /me primary role as role_id
exclude primary role from additional_role_id (empty if no extra roles)
add project-to-role debug logs for role source tracing
2026-02-26 10:45:32 +08:00
admin 2325b0827d Merge branch 'rsa' into 'main'
Rsa

See merge request psa/uess/authn!1
2026-02-25 16:24:59 +08:00
admin 0017432deb fix payload 2026-02-25 16:22:10 +08:00
admin 5d94c28378 fixed clearing of csrf and refresh tokens 2026-02-20 14:41:19 +08:00
admin ed2eb67912 fixed query 2026-02-20 14:18:25 +08:00
admin b255873767 test 2026-02-20 14:12:49 +08:00
admin 732ed73d4f added for csrf 2026-02-18 14:17:48 +08:00
admin f74c84df03 fixed csrf 2026-02-18 10:33:42 +08:00
admin 7020e16a97 added setting of csrf 2026-02-18 10:16:56 +08:00
admin b2b7cacaa6 updated query 2026-02-16 10:21:44 +08:00
admin 6821a32490 removed comment 2026-02-16 08:59:37 +08:00
admin fee314870d feat(auth): support multiple user roles in JWT and services
- Change JWT access token RoleID claim from int to []int to support multiple roles per user
- Update all token generation and refresh logic to handle multiple role IDs as []int
- Refactor services to return and process multiple role IDs from user_roles table
- Fix OAuth state handling explanation and improve code comments
- Clean up related function signatures and usages for consistency
2026-02-03 16:35:08 +08:00
admin f4b8651a5c fixed multiple roles! 2026-02-03 11:01:48 +08:00
admin 98f1705f72 fix 2026-01-27 13:20:03 +08:00
admin ac0ff00880 fix tests 2026-01-27 10:58:24 +08:00
admin 8af97e970a added error message 2026-01-26 10:36:49 +08:00
admin 33c59d1c6d added csrf 2026-01-21 13:41:15 +08:00
admin 7caf9b069d added forgot password 2026-01-21 11:12:46 +08:00
admin 18c845ddc8 added redirect if there's no email found in the system 2026-01-21 09:27:15 +08:00
admin a453d4b5af fixed error message if there's no email address found in the server 2026-01-15 13:51:29 +08:00
admin e2844df53b removed the snippet where it checks the authorization in authentication, authn is purely checking if the user is registered in db 2026-01-14 08:25:19 +08:00
admin 9af3e50011 fixed dereferencing of FetchedRedirectURI 2026-01-07 16:32:05 +08:00
admin de1361c20e fixed allowedRedirectURI 2026-01-07 15:40:53 +08:00
admin 2f1debaa96 added logging 2026-01-07 15:32:30 +08:00
admin 78c384055b removed unused variable 2026-01-07 15:27:32 +08:00
admin cd2c4cccb7 fixed error message 2026-01-07 15:27:23 +08:00
admin 1c443649d3 fixed redirect_uri logic 2026-01-07 15:21:01 +08:00
admin bfdfbba53e fixed logic 2026-01-07 14:42:05 +08:00
admin d91e4e57c8 added redirect_uri fetching from query param 2026-01-07 13:21:21 +08:00
admin ec18a6cacd added whitelisting of redirect 2026-01-07 13:20:24 +08:00