9 commits

Author	SHA1	Message	Date
yusing	cd291556fc	fix(oid); redirect	2025-05-10 21:25:27 +08:00
yusing	f9a8aede20	feat: hCaptcha middleware	2025-05-04 17:21:12 +08:00
yusing	2fe4fef779	fix(oidc): enforce https redirection to prevent errors	2025-05-03 04:56:32 +08:00
yusing	c5fd21552e	fix(oidc): token not being refreshed when receiving simutaneous requests from the same session	2025-04-28 11:19:57 +08:00
yusing	5148cb3b8b	refactor: remove unused constant CookieOauthSessionID, better error message	2025-04-26 03:55:16 +08:00
yusing	be257b0532	refactor: change OIDCScopes to GetCommaSepEnv	2025-04-26 03:30:22 +08:00
yusing	af8d2c74f6	revert(oidc): api breaking changes	2025-04-25 11:10:21 +08:00
yusing	7461344004	fix: json store marshaling, api handler ... - code clean up - uncomment and simplify api auth handler - fix redirect url for frontend - proper redirect	2025-04-24 04:47:42 +08:00
yusing	b815c6fd69	feat(oidc): support token refreshing via offline_access scope ... - refactored code - moved api/v1/auth to auth/ - security enhancement - env example update - default jwt ttl changed to 24 hours	2025-04-23 17:50:22 +08:00