|
|
032c07beef
|
fix(proxy): auth middleware only for exact /, unmatched paths get greeting
- Move combinedAuth inside the launcher handler path check
- Unmatched proxy paths (not exactly /) now correctly serve NotFoundHandler greeting
- Root / remains auth-gated as intended
|
2026-07-06 09:08:25 +01:00 |
|
|
|
e575b4eeb0
|
feat: self-signed TLS fallback on :443 + proxy as central router
- Add CertFile/KeyFile fields to TLSConfig (config.go)
- File-based TLS fallback: when cert_file+key_file set, ListenAndServeTLS on :443
while keeping HTTP on configured port (certmagic ACME is non-fallback path)
- deploy.sh: enable TLS by default, generate self-signed cert during deploy
- deploy.sh: change default port 8080 → 80 (reverse proxy standard)
- deploy.sh: add cert_file/key_file to config template
- proxy as central router fix (handler.go: ServeHTTP + StaticHandler methods)
|
2026-07-06 08:59:12 +01:00 |
|
|
|
94258749dc
|
fix(auth): admin redirects to OIDC login when no session
|
2026-06-15 20:15:12 +00:00 |
|
|
|
43b32cc881
|
feat(auth): /access callback, nextwks.eu cookie domain
|
2026-06-15 20:06:34 +00:00 |
|
|
|
a8172324b7
|
feat(proxy): NextWks proxies /auth/* to Authelia internally
|
2026-06-15 09:49:53 +00:00 |
|
|
|
95308c880b
|
refactor(auth): single-domain setup, remove cross-domain cookie hackery
|
2026-06-15 09:27:34 +00:00 |
|
|
|
917dbb0844
|
feat(auth): logout via Authelia with redirect back to confirmation page
|
2026-06-15 08:32:26 +00:00 |
|
|
|
312aa388d4
|
feat(auth): custom logout page with Authelia sign-out and re-login button
|
2026-06-15 08:24:13 +00:00 |
|
|
|
594cf3efe2
|
fix(auth): only clear NextWks cookie on logout, cant cross-domain
|
2026-06-15 08:19:44 +00:00 |
|
|
|
d0dbe9b472
|
feat(auth): kill Authelia session cookie on logout
|
2026-06-15 08:15:57 +00:00 |
|
|
|
00a252b2e9
|
fix(auth): simple logout - clear cookie, redirect to workspace
|
2026-06-15 08:14:04 +00:00 |
|
|
|
6bec565b7a
|
feat(auth): force re-login after logout via prompt=login
|
2026-06-15 08:12:32 +00:00 |
|
|
|
49c4254594
|
fix(auth): logout redirects to workspace, which redirects to Authelia login
|
2026-06-15 08:10:35 +00:00 |
|
|
|
2489ac589e
|
fix(auth): force re-login via prompt=login for proper logout
|
2026-06-15 08:07:54 +00:00 |
|
|
|
bc7d546e64
|
fix(auth): redirect back to workspace after Authelia logout
|
2026-06-15 08:02:49 +00:00 |
|
|
|
b5ed7e2364
|
fix(auth): change SameSite to Lax for redirect compatibility
|
2026-06-15 07:08:24 +00:00 |
|
|
|
44fec75b42
|
fix(auth): redirect to Authelia /logout instead of end-session
|
2026-06-15 06:48:03 +00:00 |
|
|
|
8b2ab0c776
|
fix(auth): proper logout with domain cookie and Authelia end-session
|
2026-06-15 06:46:10 +00:00 |
|
|
|
3b3cc7baa4
|
feat(email): SMTP welcome email on user creation
|
2026-06-15 06:38:11 +00:00 |
|
|
|
9df43d8423
|
feat(admin): groups page with create/list/delete, split pane layout
|
2026-06-15 05:29:29 +00:00 |
|
|
|
6944223d35
|
feat(config): locale settings (language/timezone) in global page and config
|
2026-06-15 04:55:10 +00:00 |
|
|
|
9813124ba7
|
feat(admin): global settings page for config editing
|
2026-06-15 04:34:49 +00:00 |
|
|
|
2579715cbc
|
feat(ui): Google Workspace-style redesign, role-based admin, long-press PWA
|
2026-06-14 17:48:00 +00:00 |
|
|
|
93104b24d6
|
build: add versioning (2026.6.0001) with ldflags and /api/version endpoint
|
2026-06-14 15:09:02 +00:00 |
|
|
|
1780cea340
|
fix(auth): export IsAdmin, fix bearer token fallback chain
|
2026-06-14 14:58:02 +00:00 |
|
|
|
7c0d5a7b91
|
fix(auth): combine session+role and bearer token as fallback for admin API
|
2026-06-14 14:57:13 +00:00 |
|
|
|
3c365e8206
|
feat(auth): replace bearer token with OIDC session + admin role check, auto-fix roles from groups
|
2026-06-14 14:56:39 +00:00 |
|
|
|
3f2a7b81cf
|
fix(auth): Admin UI pages use OIDC session auth, API stays bearer token
|
2026-06-14 14:54:50 +00:00 |
|
|
|
c89f823cb6
|
fix(auth): chain session middleware before auth gate to prevent redirect loop
|
2026-06-14 14:52:25 +00:00 |
|
|
|
6873e474be
|
fix(auth): support form_post OIDC callback and add POST /auth/callback route
|
2026-06-14 14:43:12 +00:00 |
|
|
|
0a1770acc4
|
fix(sync): add error logging, fix systemd ReadWritePaths, add role field, interactive admin creation in installer
|
2026-06-14 14:11:38 +00:00 |
|
|
|
34672eaedb
|
fix(auth): add oidc.issuer_url to use public-facing Authelia URL for browser redirects
|
2026-06-14 14:00:55 +00:00 |
|
|
|
5f9dec740c
|
build(core): polish installer with smoke test, status check, and production-ready systemd service
|
2026-06-14 13:24:48 +00:00 |
|
|
|
61d339b940
|
feat(ui): implement workspace launcher landing page, OIDC auth gate, and PWA shell
|
2026-06-14 13:20:34 +00:00 |
|
|
|
e3fbe0f9d9
|
chore: restructure repo to /root/lexton-it/NextWks/ with src/ + app/ layout and install.sh
|
2026-06-14 13:11:56 +00:00 |
|
|
|
ed68a8c51a
|
feat(admin): build admin panel with integrated user management, authelia sync, and templ/htmx ui
|
2026-06-14 13:06:28 +00:00 |
|
|
|
3ec860b67d
|
feat(env): initialize /opt/ infrastructure framework, config definitions, and git repo
|
2026-06-14 12:56:33 +00:00 |
|
