49 Commits

Author SHA1 Message Date
admin ed1ea2ba42 renamed all instances of "id" to "jwt_sessions_id" to match db column name. 2026-03-14 09:37:06 +08:00
admin b6ab8d3187 Refactored refresh token endpoint 2026-03-13 16:51:44 +08:00
admin aa08fff660 only implemented refresh_token as params for requests from mobile 2026-03-12 13:28:26 +08:00
admin 71adf3d7d3 added refreshtoken to callback params 2026-03-12 11:18:58 +08:00
admin 30c91cf5c8 added fetching of origin in auth login 2026-03-05 10:09:12 +08:00
admin 8f51faeb12 added project status in project metadata 2026-03-05 09:10:06 +08:00
admin b76eba9bf0 added more error logs 2026-02-27 10:19:24 +08:00
admin acebd04780 added logging for access token expiration 2026-02-27 09:34:05 +08:00
admin 2f9ac51570 fix(jwt): make role claims consistent with /me and correct additional_role_id
derive JWT roles from FetchUserByEmail (not GetRoleIDsFromEmail)
keep /me primary role as role_id
exclude primary role from additional_role_id (empty if no extra roles)
add project-to-role debug logs for role source tracing
2026-02-26 10:45:32 +08:00
admin 0017432deb fix payload 2026-02-25 16:22:10 +08:00
admin 5d94c28378 fixed clearing of csrf and refresh tokens 2026-02-20 14:41:19 +08:00
admin ed2eb67912 fixed query 2026-02-20 14:18:25 +08:00
admin b255873767 test 2026-02-20 14:12:49 +08:00
admin 732ed73d4f added for csrf 2026-02-18 14:17:48 +08:00
admin f74c84df03 fixed csrf 2026-02-18 10:33:42 +08:00
admin 7020e16a97 added setting of csrf 2026-02-18 10:16:56 +08:00
admin 6821a32490 removed comment 2026-02-16 08:59:37 +08:00
admin fee314870d feat(auth): support multiple user roles in JWT and services
- Change JWT access token RoleID claim from int to []int to support multiple roles per user
- Update all token generation and refresh logic to handle multiple role IDs as []int
- Refactor services to return and process multiple role IDs from user_roles table
- Fix OAuth state handling explanation and improve code comments
- Clean up related function signatures and usages for consistency
2026-02-03 16:35:08 +08:00
admin f4b8651a5c fixed multiple roles! 2026-02-03 11:01:48 +08:00
admin 98f1705f72 fix 2026-01-27 13:20:03 +08:00
admin ac0ff00880 fix tests 2026-01-27 10:58:24 +08:00
admin 8af97e970a added error message 2026-01-26 10:36:49 +08:00
admin 7caf9b069d added forgot password 2026-01-21 11:12:46 +08:00
admin 18c845ddc8 added redirect if there's no email found in the system 2026-01-21 09:27:15 +08:00
admin a453d4b5af fixed error message if there's no email address found in the server 2026-01-15 13:51:29 +08:00
admin e2844df53b removed the snippet where it checks the authorization in authentication, authn is purely checking if the user is registered in db 2026-01-14 08:25:19 +08:00
admin 9af3e50011 fixed dereferencing of FetchedRedirectURI 2026-01-07 16:32:05 +08:00
admin de1361c20e fixed allowedRedirectURI 2026-01-07 15:40:53 +08:00
admin 2f1debaa96 added logging 2026-01-07 15:32:30 +08:00
admin 78c384055b removed unused variable 2026-01-07 15:27:32 +08:00
admin cd2c4cccb7 fixed error message 2026-01-07 15:27:23 +08:00
admin 1c443649d3 fixed redirect_uri logic 2026-01-07 15:21:01 +08:00
admin bfdfbba53e fixed logic 2026-01-07 14:42:05 +08:00
admin d91e4e57c8 added redirect_uri fetching from query param 2026-01-07 13:21:21 +08:00
admin ec18a6cacd added whitelisting of redirect 2026-01-07 13:20:24 +08:00
admin c8e873cbc1 add another check before generating a token for the used email 2026-01-06 09:19:15 +08:00
admin 4068992e06 fix 2026-01-06 09:11:28 +08:00
admin 679a7a9a42 removed redirec t 2026-01-06 09:07:24 +08:00
admin 744796a4b1 added logging 2026-01-05 16:03:53 +08:00
admin 81d3c5a3bd added health routes 2026-01-05 14:41:25 +08:00
admin d92a05407c fixed 2026-01-05 13:13:07 +08:00
admin 47f32c9f2e used RSA instead of HMAC signing 2026-01-05 10:44:23 +08:00
admin e54d121558 adjusted to fit the URS for JWT expiration time 2026-01-05 09:40:48 +08:00
admin ee45b546a3 added fetching of role_id 2025-12-18 10:25:04 +08:00
admin 8c67cd38e7 fixed 2025-12-15 14:10:10 +08:00
admin 44f7ddc1e3 fixed 2025-12-15 10:39:13 +08:00
admin adb0f59b23 authentication requests from authorization microservice 2025-12-09 15:43:48 +08:00
admin 7c87114b30 fixed 2025-11-26 11:31:09 +08:00
admin 052c7e0cca init commit 2025-11-25 15:12:31 +08:00