Commit graph

47 commits

Author SHA1 Message Date
6cda63c538 Fixed a potential directory traversal, fixed storage being very borked, made the auth login process less memory intensive and rely more on JWTs
Signed-off-by: arzumify <jliwin98@danwin1210.de>
2025-01-25 14:47:51 +00:00
7422201d98 ISM rewrite
Signed-off-by: arzumify <jliwin98@danwin1210.de>
2025-01-08 18:31:34 +00:00
f8fc9b7206 ISM rewrite
Signed-off-by: arzumify <jliwin98@danwin1210.de>
2025-01-08 13:47:05 +00:00
8331219da4 Fixed autoaccept not working, made logout not run localStorage.Clear()
Signed-off-by: arzumify <jliwin98@danwin1210.de>
2024-11-15 17:00:06 +00:00
9cbe1e8ecc Fixed registration not changing the redirect URI
Signed-off-by: arzumify <jliwin98@danwin1210.de>
2024-11-15 16:45:13 +00:00
a2dab0869d Made mem work correctly
Signed-off-by: arzumify <jliwin98@danwin1210.de>
2024-11-15 16:34:40 +00:00
d04a40f655 Made it not constantly regenerate the oauth entries for services
Signed-off-by: arzumify <jliwin98@danwin1210.de>
2024-11-13 16:36:58 +00:00
9ca7caf2c3 Fixed the password changing API using the old argon2 hashing algorithm
Signed-off-by: arzumify <jliwin98@danwin1210.de>
2024-11-11 17:25:01 +00:00
1302147be2 Updated go version, updated dependencies
Signed-off-by: arzumify <jliwin98@danwin1210.de>
2024-11-08 18:02:41 +00:00
d40bc7dc8e Fixed a bug where setting compression would crash the server on local routes, fixed some useless never-will-happen eventualities
Signed-off-by: arzumify <jliwin98@danwin1210.de>
2024-11-04 17:09:45 +00:00
13d00e8222 Rewrote the entire blob storage service, made auth not use MarshalBinary, which is useless, and made the Start button in captchaDiv the correct colour and same size as it's surrounding elements
Signed-off-by: arzumify <jliwin98@danwin1210.de>
2024-11-03 17:03:35 +00:00
9ec38c34b6 Fixed gitignore, fixed a font file being missing
Signed-off-by: arzumify <jliwin98@danwin1210.de>
2024-10-29 14:36:44 +00:00
6b483f712e Added fancy printing when building, fixed compressionlevel attempting to be set when no compression is specified
Signed-off-by: arzumify <jliwin98@danwin1210.de>
2024-10-29 12:51:04 +00:00
d6adc1c775 Added compression support, made all fetches use jsFetch for improved binary sizes
Signed-off-by: arzumify <jliwin98@danwin1210.de>
2024-10-29 11:20:01 +00:00
5910a61f19 Tidied up the CSS files, made the delete account button red
Signed-off-by: arzumify <jliwin98@danwin1210.de>
2024-10-27 15:50:18 +00:00
28003d7093 Fixed up dark mode, added placeholders for the dashboard inputs
Signed-off-by: arzumify <jliwin98@danwin1210.de>
2024-10-27 15:29:21 +00:00
6f0bdb66db Fixed the body revealing transitions, removed broken font files
Signed-off-by: arzumify <jliwin98@danwin1210.de>
2024-10-23 19:13:35 +01:00
eff9f20fb3 Fixed the broken signup.html
Signed-off-by: arzumify <jliwin98@danwin1210.de>
2024-10-22 20:31:09 +01:00
6e33618a75 Fixed mobile mode
Signed-off-by: arzumify <jliwin98@danwin1210.de>
2024-10-22 20:27:45 +01:00
af693051fa Delete the now unused backgrounds
Signed-off-by: arzumify <jliwin98@danwin1210.de>
2024-10-22 20:24:09 +01:00
93a984b951 Add some much-needed eye-candy :D
Signed-off-by: arzumify <jliwin98@danwin1210.de>
2024-10-22 20:20:46 +01:00
6eb9e76316 Try to fix subdomain architecture
Signed-off-by: arzumify <jliwin98@danwin1210.de>
2024-10-20 19:51:16 +01:00
8943808264 Disable CORS again...
Signed-off-by: Arzumify <jliwin98@danwin1210.de>
2024-10-15 20:13:38 +01:00
7a9af4ae67 Specify the CORS headers because it needs that for some reason on some browsers (god I hate CORS)
Signed-off-by: Arzumify <jliwin98@danwin1210.de>
2024-10-15 20:12:11 +01:00
20aa69b26d Only disable CORS for the ones which need CORS disabled
Signed-off-by: Arzumify <jliwin98@danwin1210.de>
2024-10-15 19:45:55 +01:00
8a994bb127 Uhh, I think I did the pattern wrong. I guess someone did get CORS.
Signed-off-by: Arzumify <jliwin98@danwin1210.de>
2024-10-15 19:42:09 +01:00
343a0b0eb7 Disable even more CORS! Nobody gets CORS!
Signed-off-by: Arzumify <jliwin98@danwin1210.de>
2024-10-15 19:40:58 +01:00
b1e06cf673 Disable CORS
Signed-off-by: Arzumify <jliwin98@danwin1210.de>
2024-10-15 19:39:16 +01:00
5492212611 Attempt yet another method of activating services
Signed-off-by: Arzumify <jliwin98@danwin1210.de>
2024-10-15 19:17:29 +01:00
02372cb9ed Moved to the v2 version of the fulgens library
Signed-off-by: Arzumify <jliwin98@danwin1210.de>
2024-10-15 19:06:05 +01:00
1d445cb61b Made renderX provide content types to not make forgejo complain
Signed-off-by: Arzumify <jliwin98@danwin1210.de>
2024-10-14 13:10:51 +01:00
f4ee272865 Fixed duplicate created entry
Signed-off-by: Arzumify <jliwin98@danwin1210.de>
2024-10-14 12:31:14 +01:00
58838f51ad Made the postgres connection be tested before opening, fixed the postgres create new users table
Signed-off-by: Arzumify <jliwin98@danwin1210.de>
2024-10-14 12:23:33 +01:00
4fe28255fe Updated packages, removed unneeded double-check, switched over to RFC-2024-0008 as the authentication protocol, updated fulgens library, fixed broken quotas, fixed a broken JSON validator
Signed-off-by: Arzumify <jliwin98@danwin1210.de>
2024-10-13 19:20:19 +01:00
5b6c547b9a Removed unneccesary deferrations
Signed-off-by: Arzumify <jliwin98@danwin1210.de>
2024-10-05 10:22:42 +01:00
018cb6e74b Made the nucleus apps not have any special loading process over others except from loading first, fixed clientKeyShare interpreting the token wrongly
Signed-off-by: Arzumify <jliwin98@danwin1210.de>
2024-10-04 18:30:17 +01:00
d0c02e3729 Updated all modules and moved the authLibrary to a seperated library to prevent versioning issues
Signed-off-by: Arzumify <jliwin98@danwin1210.de>
2024-10-04 17:33:00 +01:00
ef0b04c55b Updated the auth module and fixed it's incorrect module path
Signed-off-by: Arzumify <jliwin98@danwin1210.de>
2024-10-04 17:05:30 +01:00
acc5067b5e Updated a lot of libraries, seperated fg-library into its own package to solve build issues with version incompatibilities across modules
Signed-off-by: Arzumify <jliwin98@danwin1210.de>
2024-10-03 19:06:53 +01:00
ac7006ee01 Fixed the JWT versions being highly outdated
Signed-off-by: Arzumify <jliwin98@danwin1210.de>
2024-10-03 17:41:09 +01:00
07340775eb Made the oauth service actually report it's activation
Signed-off-by: Arzumify <jliwin98@danwin1210.de>
2024-10-02 18:31:57 +01:00
755a600418 Made the tokens contain the actual sub
Signed-off-by: Arzumify <jliwin98@danwin1210.de>
2024-10-02 17:52:47 +01:00
10a48cdd1c Let the authentication service able to send the public key
Signed-off-by: Arzumify <jliwin98@danwin1210.de>
2024-10-02 17:45:37 +01:00
ddc47748fc Removed the serviceInitialisationInformation give a ServiceID, because it's not needed
Signed-off-by: Arzumify <jliwin98@danwin1210.de>
2024-10-02 17:07:01 +01:00
5b53e5e56f Updated PoW library, removed unused graphics, moved checking client token validity serverside in clientKeyShare, made not having a user account not crash the app, made the PoW easier and have a cleaner interface, fixed some elements in dark mode, optimised 0px -> 0 in some CSS, updated some packages
Signed-off-by: Arzumify <jliwin98@danwin1210.de>
2024-09-29 16:06:28 +01:00
b89a8ac83a Fixed a duplicate SQL query, added an error handler to the CREATE GLOBAL function 2024-09-29 09:38:03 +01:00
42d478ec48 Initial commit 2024-09-28 19:41:34 +01:00