cclohmar/NextMyDay
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
NextMyDay/internal/core/auth
History
Claus Lohmar b4222077b1 fix(auth): judge the passkey nudge by the configured origin 
REVIEW-001 (M0) L7c: shouldNudge trusted the request Host, so a reverse
proxy that rewrites Host wrongly suppressed (or enabled) the nudge.

Prefer the configured server.base_url host (Deps.BaseURL) and fall back to
the request Host only when it is unset. Wire the secure session-cookie name
through SessionCookieNameFor so the `__Host-` prefix (L1s) is used
consistently by the flows.
2026-10-14 11:29:58 +00:00
..
flow fix(auth): judge the passkey nudge by the configured origin 2026-10-14 11:29:58 +00:00
totp fix(security): reject replayed TOTP codes 2026-10-14 11:29:55 +00:00
webauthn feat(auth): add WebAuthn, TOTP and the enroll/login flow (SPEC-004/006) 2026-10-14 10:53:53 +00:00
acceptance_test.go feat(auth): add WebAuthn, TOTP and the enroll/login flow (SPEC-004/006) 2026-10-14 10:53:53 +00:00
auth.go feat(auth): add WebAuthn, TOTP and the enroll/login flow (SPEC-004/006) 2026-10-14 10:53:53 +00:00
credentials.go feat(auth): add WebAuthn, TOTP and the enroll/login flow (SPEC-004/006) 2026-10-14 10:53:53 +00:00
identities.go feat(auth): add WebAuthn, TOTP and the enroll/login flow (SPEC-004/006) 2026-10-14 10:53:53 +00:00
sealer.go feat(auth): add WebAuthn, TOTP and the enroll/login flow (SPEC-004/006) 2026-10-14 10:53:53 +00:00
sealer_test.go feat(auth): add WebAuthn, TOTP and the enroll/login flow (SPEC-004/006) 2026-10-14 10:53:53 +00:00
sessions.go feat(auth): add WebAuthn, TOTP and the enroll/login flow (SPEC-004/006) 2026-10-14 10:53:53 +00:00
totp.go feat(auth): add WebAuthn, TOTP and the enroll/login flow (SPEC-004/006) 2026-10-14 10:53:53 +00:00