andrew
3c1253ee45
Merge branch 'develop'
Push Docker / docker (push) Successful in 4m47s
Push Develop / docker (push) Successful in 4m44s
Sync GitHub / sync (push) Successful in 6s
2026-06-17 13:27:48 -04:00
andrew
70bf811b1d
gitea action cleanup
Push Develop / docker (push) Successful in 6m49s
Sync GitHub / sync (push) Successful in 7s
2026-06-17 10:55:26 -04:00
andrew
3269151e9b
new workflow to build and push to docker hub
Sync GitHub / sync (push) Failing after 6s
2026-06-14 18:27:32 -04:00
andrew
1da2188bdf
Gitea action to sync to GitHub
Sync GitHub / sync (push) Successful in 7s
2026-06-13 21:28:59 -04:00
andrew
7cf7e04d17
extracted interfaces for services, to aid in creating tests
2026-06-05 15:15:21 -04:00
andrew
0813323ac2
renamed form fields to work better with password managers; fixed bug where an invalid login requests were not being counted as login attempts; preserve username when using central auth
2026-06-01 16:28:57 -04:00
andrew
9114cfd96f
update to php 8.5, backup codes, etc.
...
modified: Dockerfile
modified: composer.json
modified: composer.lock
modified: config/packages/twig.yaml
modified: config/services.yaml
modified: docs/Caddyfile
modified: docs/compose.yaml
renamed: docs/env.example -> docs/example.env
modified: public/index.php
modified: readme.md
modified: src/Command/GenerateBackupCodesCommand.php
modified: src/ConfigBag.php
modified: src/Data/Payload.php
modified: src/Enum/Scope.php
modified: src/Listener/AcceptListener.php
modified: src/Listener/AllowListener.php
modified: src/Listener/InterceptListener.php
modified: src/Listener/LoginListener.php
modified: src/MonitorCacheKeys.php
modified: src/PersistCache.php
modified: src/Service/BackupCodeManager.php
modified: src/Service/DomainManager.php
new file: src/Service/LoginManager.php
modified: src/Trait/CookieNameTrait.php
modified: src/Trait/GetTotpTrait.php
modified: src/Trait/MakeNonceTrait.php
modified: src/Trait/StringTrait.php
modified: src/Utilities.php
modified: templates/_script.html.twig
modified: templates/_style.html.twig
modified: templates/base.html.twig
modified: templates/login.html.twig
2026-05-29 21:56:42 -04:00
andrew
43e9b7136e
auth subdomain tentatively complete.
...
All domain logic moved into service.
2026-05-22 12:43:02 -04:00
andrew
38124ef66c
First draft of backup codes. only created when the command is called. no command yet to expire/review codes.
...
Also added a few safeguards against excessively long user input.
Started on ability to redirect to auth subdomain (incomplete).
2026-05-21 12:15:35 -04:00
andrew
6ed1ab26f1
cache persistence improvement, only update keys which have changed. More efficient, and less likely to cause race conditions.
2026-03-12 17:15:49 -04:00
andrew
a0dc1a6049
rate-limiting update, now using a compound sliding-window. Continuing to move over to using traits more, and other code cleanup.
2026-03-11 08:27:27 -04:00
andrew
3d28485921
Removal of static-secret and totp-lookup.
...
Intending to build support for single-use backup codes.
Started refactoring to move trait dependencies internally, so that classes only have to specify their own direct dependencies.
2026-03-09 16:22:32 -04:00
andrew
27394ae555
v0.6.0 optional lookup for totp by static password
2026-02-10 13:31:09 -05:00
andrew
c235aad941
single column if narrow enough
2026-01-17 14:02:23 -05:00
andrew
b61400085a
frontend support for password
2026-01-17 10:57:57 -05:00
andrew
4a543f45ca
minor nonce related cleanup
2026-01-16 12:17:18 -05:00
andrew
4cec5a5963
added project history
2025-12-28 11:14:59 -05:00
andrew
c3fbb12842
updating readme
2025-12-28 10:38:46 -05:00
andrew
ac817649ab
fixed bug which can occur if you delete cache files.
...
fixed warnings due to volume locations.
2025-12-26 21:17:36 -05:00
andrew
1c4c289d81
massive rewrite to switch to using listeners instead of controller, header for login payload instead of get request, removed icon system, asset system, was able to remove all the domain processing, enhanced cookie security, and more.
2025-12-23 11:24:47 -05:00
andrew
b36aabb8a3
WIP: nearly done switching to using header instead of url parameters
2025-12-18 19:20:50 -05:00
andrew
f486ab7481
already accepted/rejected are now listeners to start cleaning up the massive controller of doom
2025-12-17 15:25:07 -05:00
andrew
a73d039e10
removed maker-bundle, switching to apcu
2025-12-16 22:34:57 -05:00
andrew
102b9f3e78
Full code refactor to Symfony7.4 with FrankenPHP
...
Includes significant breaking changes.
Default port and transportation changed to
http via port 80
Names of environment variables have changed.
2025-12-15 12:30:14 -05:00
andrew
f5a5d63eb7
finished adding rate limiting
2025-12-03 11:05:32 -05:00
andrew
f60a81e259
tentatively added rate limiting, block by IP if too many failed login attempts
2025-12-02 22:16:56 -05:00
andrew
3bb2d9cecd
new page for client error (too many requests).. work in progress
2025-12-01 22:47:36 -05:00
andrew
5ebfad604f
method in snippet is required
2025-12-01 11:51:08 -05:00
andrew
e34645eeaa
fixed a typo
2025-11-20 11:21:53 -05:00
andrew
1f5e4847ca
fix typo
2025-11-19 10:43:10 -05:00
andrew
91bb67da51
example docker compose
2025-11-19 10:42:13 -05:00
andrew
9d4dae4a93
added MIT license
2025-11-14 15:31:23 -05:00
andrew
b8ebbd95e6
Added a readme
2025-11-14 15:25:29 -05:00
andrew
40a98c0e72
bugfix, only use url reutrn-to parameter if not empty
2025-11-12 16:30:26 -05:00
andrew
e27d393165
PREAUTH_SEND_TO environment variable, to set a default redirection after authenticating
2025-11-12 16:17:04 -05:00
andrew
25186c3aa9
initial commit
2025-11-12 15:15:30 -05:00
andrew