13 commits

Author	SHA1	Message	Date
yusing	7cd44b5ad3	rename cookies to prevent conflict	2025-01-13 08:33:56 +08:00
yusing	81d96394b9	allow customizing OICD scopes	2025-01-13 08:30:46 +08:00
yusing	76fe5345d8	cleanup code, redirect to auth page when need	2025-01-13 07:15:29 +08:00
yusing	ef277ef57f	fix: docker test and golangci-lint	2025-01-13 05:37:29 +08:00
Peter Olds	9a12dab600	fix: allow oauth_state token to be cross-domain (#40) ... External OIDC providers won’t work with the current setup.	2025-01-13 05:27:06 +08:00
Yuzerion	51f6391ded	feat: Add optional OIDC support (#39) ... This allows the API to trigger an OAuth workflow to create the JWT for authentication. For now the workflow is triggered by manually visiting `/api/login/oidc` on the frontend app until the UI repo is updated to add support. Co-authored-by: Peter Olds <peter@olds.co>	2025-01-13 04:49:46 +08:00
yusing	55134c8426	improved api error handling	2025-01-05 00:02:31 +08:00
yusing	b63ebfcb3b	disabled auth by default (when no JWT secret is specified)	2024-11-04 00:32:19 +08:00
yusing	91e012987e	added option for jwt token ttl	2024-11-02 03:21:47 +08:00
yusing	67b6e40f85	remove unused code	2024-11-02 03:04:15 +08:00
yusing	4ee93a1351	added logout endpoint	2024-10-31 00:58:35 +08:00
yusing	5fa86b5eb7	fixed auth internal server error	2024-10-30 10:19:30 +08:00
yusing	81177926ff	implemented login and jwt auth	2024-10-30 06:25:32 +08:00