16 commits

Author	SHA1	Message	Date
yusing	cd291556fc	fix(oid); redirect	2025-05-10 21:25:27 +08:00
yusing	c05059765d	style: coed cleanup and fix styling	2025-05-10 10:46:31 +08:00
yusing	f9a8aede20	feat: hCaptcha middleware	2025-05-04 17:21:12 +08:00
yusing	ac1470d81d	fix: remove incorrect comment from getOAuthRefreshToken function	2025-05-03 19:38:02 +08:00
yusing	98e90d7a0b	refactor: improve error handling and response formatting in API	2025-05-03 17:41:10 +08:00
yusing	2fe4fef779	fix(oidc): enforce https redirection to prevent errors	2025-05-03 04:56:32 +08:00
yusing	62c551c7fe	fix: tests	2025-04-30 17:42:51 +08:00
yusing	c5fd21552e	fix(oidc): token not being refreshed when receiving simutaneous requests from the same session	2025-04-28 11:19:57 +08:00
yusing	fb2f850311	fix(oidc): incorrect redirect url	2025-04-26 06:57:02 +08:00
yusing	5148cb3b8b	refactor: remove unused constant CookieOauthSessionID, better error message	2025-04-26 03:55:16 +08:00
yusing	be257b0532	refactor: change OIDCScopes to GetCommaSepEnv	2025-04-26 03:30:22 +08:00
yusing	4f557043a5	fix(auth): login issue with user password authentication	2025-04-26 01:34:46 +08:00
yusing	af8d2c74f6	revert(oidc): api breaking changes	2025-04-25 11:10:21 +08:00
yusing	8363dfe257	fix: json marshal/unmarshal	2025-04-25 08:25:37 +08:00
yusing	7461344004	fix: json store marshaling, api handler ... - code clean up - uncomment and simplify api auth handler - fix redirect url for frontend - proper redirect	2025-04-24 04:47:42 +08:00
yusing	b815c6fd69	feat(oidc): support token refreshing via offline_access scope ... - refactored code - moved api/v1/auth to auth/ - security enhancement - env example update - default jwt ttl changed to 24 hours	2025-04-23 17:50:22 +08:00