Gani Georgiev
|
e51456bce2
|
[#6073] added poc implementation for the dry submit removal
|
2024-12-11 18:43:48 +02:00 |
|
Gani Georgiev
|
77ac44a49a
|
moved the default UI CSP as response header
|
2024-12-02 13:45:44 +02:00 |
|
Gani Georgiev
|
79f6f4ee60
|
fixed comment typo
|
2024-11-28 15:21:19 +02:00 |
|
Gani Georgiev
|
ab7194a639
|
fixed gzip middleware not applying when serving static files
|
2024-11-28 13:51:43 +02:00 |
|
Gani Georgiev
|
cb2b27f6ed
|
updated otp request error message
|
2024-11-26 19:51:21 +02:00 |
|
Gani Georgiev
|
fab334fca6
|
updated error messages
|
2024-11-25 11:28:20 +02:00 |
|
Gani Georgiev
|
73361370f0
|
added list hidden field filter test
|
2024-11-24 15:35:42 +02:00 |
|
Gani Georgiev
|
e9ece220d6
|
added env variables support for the thumbs generation limits
|
2024-11-23 20:38:30 +02:00 |
|
Gani Georgiev
|
c3b347af4b
|
added note and tests regarding the shared batch Authorization header
|
2024-11-23 11:54:25 +02:00 |
|
Gani Georgiev
|
e5800875c2
|
updated ui/dist and added fallback debug log
|
2024-11-22 23:30:44 +02:00 |
|
Gani Georgiev
|
2e43518bb4
|
synced ported cors middleware
|
2024-11-22 23:19:23 +02:00 |
|
Gani Georgiev
|
305e183f58
|
added apis.ToApiError alias
|
2024-11-22 20:44:29 +02:00 |
|
Gani Georgiev
|
5d8a8dd7d8
|
updated godoc and renamed cors middleware handler
|
2024-11-21 22:22:58 +02:00 |
|
Gani Georgiev
|
c2e7ab8d41
|
fixed oauth2 redirect test
|
2024-11-21 12:11:00 +02:00 |
|
Gani Georgiev
|
7ee6b11e9d
|
return an error in case of required MFA so that external handlers can react if necessary
|
2024-11-21 11:12:25 +02:00 |
|
Gani Georgiev
|
d0795bd849
|
updated tests
|
2024-11-19 22:37:44 +02:00 |
|
Gani Georgiev
|
08f2190ad1
|
[#5898] instead of unregister, unset the realtime client auth state on delete of the related auth record
|
2024-11-19 22:36:32 +02:00 |
|
Gani Georgiev
|
d919d55b5e
|
allow mixing existing file names and new uploaded files
|
2024-11-19 17:45:15 +02:00 |
|
Gani Georgiev
|
9fe4f87e5b
|
added required validator for the TextField.Pattern option in case it is a primary key
|
2024-11-19 17:21:43 +02:00 |
|
Gani Georgiev
|
52e85a8036
|
added oauth2 db errors handling and replaced the auth response map with a struct
|
2024-11-18 21:16:20 +02:00 |
|
Gani Georgiev
|
70df03ffbb
|
fixed rate limiter rules matching to acount for the Audience field
|
2024-11-18 14:46:06 +02:00 |
|
Gani Georgiev
|
846136dcfb
|
restored mfa ErrNoRows check
|
2024-11-13 20:24:52 +02:00 |
|
Gani Georgiev
|
cc833ad643
|
updated mfa defaults and errors check
|
2024-11-13 20:14:27 +02:00 |
|
Gani Georgiev
|
9f606bdeca
|
otp changes - added sentTo field, allow e.Record to be nil when requesting OTP, etc.
|
2024-11-13 18:34:43 +02:00 |
|
Gani Georgiev
|
10a5c685ab
|
removed the dynamic dashboard path option as it could complicate unnecessary too many things (oauth2 redirects, default email templates, etc.)
|
2024-11-12 12:32:26 +02:00 |
|
Gani Georgiev
|
5e6d4d2126
|
added rate limit helpers for future use
|
2024-11-11 14:24:54 +02:00 |
|
Gani Georgiev
|
c38e7c36a6
|
added throttling on too many failed search attempts
|
2024-11-11 14:24:38 +02:00 |
|
Gani Georgiev
|
339399b0a4
|
updated otp manual rate limiter
|
2024-11-09 12:24:46 +02:00 |
|
Gani Georgiev
|
f6aef4471d
|
added RateLimitRule.Audience field
|
2024-11-08 18:04:13 +02:00 |
|
Gani Georgiev
|
1bd0baf328
|
updated v0.22.x changelog
|
2024-11-07 13:00:29 +02:00 |
|
Gani Georgiev
|
241a81e1fc
|
updated installer note
|
2024-11-06 20:06:34 +02:00 |
|
Gani Georgiev
|
bed45beb13
|
updated comments and pass the dashboard path into the installer
|
2024-11-06 19:19:16 +02:00 |
|
Gani Georgiev
|
e4cd6810ab
|
always register the installer hooks in case the superuser is created by a console command
|
2024-11-06 14:23:16 +02:00 |
|
Gani Georgiev
|
f38700982c
|
removed RequestEvent.UnsafeRealIP
|
2024-11-05 21:49:45 +02:00 |
|
Gani Georgiev
|
9506669095
|
refactored installer and removed RequireSuperuserAuthOnlyIfAny
|
2024-11-05 21:12:17 +02:00 |
|
Gani Georgiev
|
4f67dba6cb
|
[#5800] skip default loadAuthToken middleware if e.Auth is already set
|
2024-11-05 09:08:52 +02:00 |
|
Gani Georgiev
|
b3d88349d7
|
updated superusers test tokens with the new id
|
2024-11-04 15:48:28 +02:00 |
|
Gani Georgiev
|
83d91b3dd5
|
added realtime topic length validator
|
2024-11-03 13:14:39 +02:00 |
|
Gani Georgiev
|
106ce0f0c4
|
added support for specifying collection id with the factory and added collections indexes validator to prevent duplicated definitions
|
2024-11-03 10:44:48 +02:00 |
|
Gani Georgiev
|
d3ca24e509
|
added more user friendly error message in case ServeEvent.Next() is not invoked
|
2024-11-01 19:10:33 +02:00 |
|
Gani Georgiev
|
5a94ec9918
|
[#5741] use random string as id for non-system collections and fields
|
2024-10-29 20:08:16 +02:00 |
|
Gani Georgiev
|
49db093a51
|
fixed auto www redirect due to missing schema
|
2024-10-27 21:01:44 +02:00 |
|
Gani Georgiev
|
8c45d4d92d
|
lock the _mfas and _otps delete api rule, fixed flaky tests, fixed jsvm types example
|
2024-10-24 21:59:00 +03:00 |
|
Gani Georgiev
|
0b7741f1f7
|
added additional godoc and updated the OAuth2 form to use the same created record pointer
|
2024-10-24 08:37:22 +03:00 |
|
Gani Georgiev
|
6f2fe91da5
|
register the panic-recover handler after the activity logger
|
2024-10-18 13:47:10 +03:00 |
|
Gani Georgiev
|
8271452430
|
removed unnecessary cast
|
2024-10-14 23:04:10 +03:00 |
|
Gani Georgiev
|
78e6a8996f
|
[#5674] fixed realtime auth 403 error on resubscribe
|
2024-10-14 19:50:40 +03:00 |
|
Gani Georgiev
|
f9ee710cdd
|
normalized builtin middlewares to return hook.Handler
|
2024-10-14 18:17:31 +03:00 |
|
Gani Georgiev
|
47d5ea3ce2
|
fixed comments and added default generic arg name
|
2024-10-14 14:33:04 +03:00 |
|
Gani Georgiev
|
56b756e16b
|
[#5673] added check for empty OAuth2User.AvatarURL
|
2024-10-14 14:31:39 +03:00 |
|