public/preauth
2
0
Fork 0
Code Issues 3 Pull Requests Actions Packages Projects Releases Wiki Activity

Commit Graph

  • 1335c31d4e Merge pull request 'feat: passkey (WebAuthn) authentication on the auth subdomain' (#20) from feat/passkey-auth-subdomain into main main andrew 2026-09-27 09:43:13 -04:00
  • 9523accd23 Close the coverage gaps in the passkey code, fixing what they exposed lyra 2026-09-27 11:40:01 +00:00
  • 6bbfd44e7d Document passkey authentication lyra 2026-09-27 11:37:02 +00:00
  • ffe6870231 Add end-to-end functional tests with real cryptography lyra 2026-09-27 11:35:54 +00:00
  • 11903bf746 Add the passkey UI and fix issues it exposed lyra 2026-09-27 11:32:16 +00:00
  • 69ee5e99aa Route passkey registration through the TOTP check, not the listener lyra 2026-09-27 11:29:17 +00:00
  • ffb824c652 Add the passkey listener at priority 70 lyra 2026-09-27 10:50:03 +00:00
  • fed7b1b48c Extract session issuing so both login paths share it lyra 2026-09-27 10:45:58 +00:00
  • 436450cdc2 Add passkey ceremony store and manager lyra 2026-09-27 10:42:59 +00:00
  • 69609db8af Use a lenient signature-counter check for passkeys lyra 2026-09-27 10:38:02 +00:00
  • c84cf8c308 Add passkey credential store lyra 2026-09-27 02:40:31 +00:00
  • 108e9623e6 Add passkey configuration and availability policy (inert) lyra 2026-09-27 02:37:07 +00:00
  • 0458d9b8d2 minor text formatting change lyra 2026-09-25 19:22:33 -04:00
  • 8cd06838d3 trailing comma for code standards v1.3.0 andrew 2026-09-25 12:42:25 -04:00
  • 54990dafc6 Using cache pool by variable name is deprecated, so we've added target attributes. andrew 2026-09-25 12:32:43 -04:00
  • 06e2ca8b19 Merge pull request 'chore(ci): re-vendor conformance.sh so the audit/validate checks see the shared-workflow pin' (#19) from fix/conformance-revendor into main andrew 2026-09-25 11:53:23 -04:00
  • 4d5afa20e9 chore(ci): re-vendor conformance.sh (follow the shared-workflow pin) lyra 2026-09-25 15:27:02 +00:00
  • 74902c0fc7 adding intl andrew 2026-09-25 10:22:08 -04:00
  • bd2f5cbac3 removed problematic opcache line from dockerfile andrew 2026-09-25 09:49:46 -04:00
  • 51e921f54f now syncing github via shared workflow andrew 2026-09-25 09:03:42 -04:00
  • ba8924a244 Merge pull request 'docker to be more inline with other projects and best practices' (#18) from feat/refactoring into main andrew 2026-09-25 08:50:24 -04:00
  • 538bd74100 docker to be more inline with other projects and best practices lyra 2026-09-25 08:25:55 -04:00
  • db0cf77049 normalizing workflow and build files andrew 2026-09-24 16:41:42 -04:00
  • ef924472a3 normalizing workflow content lyra 2026-09-24 09:05:07 -04:00
  • 539385c438 finish moving to central CI. lyra 2026-09-23 17:37:49 -04:00
  • eed6b4dbff moment of truth, trying to use central CI for docker image build, starting with just develop. lyra 2026-09-23 17:34:15 -04:00
  • 2b61a43f60 Merge pull request 'build: define the Docker build in docker-bake.hcl' (#17) from chore/docker-bake into main andrew 2026-09-23 17:30:04 -04:00
  • abe94c6238 build: define the Docker build in docker-bake.hcl lyra 2026-09-23 21:01:53 +00:00
  • 1e186c9354 Merge pull request 'chore: adopt shared Guiding Light configs, fix conformance gaps (18/34 → 30/34)' (#16) from chore/adopt-guiding-light into main andrew 2026-09-23 16:40:51 -04:00
  • 2064153cd3 chore: adopt shared Guiding Light configs and fix conformance gaps lyra 2026-09-23 20:13:45 +00:00
  • 054b8ef48f Merge pull request 'fix: never cache the login flow (stale pre-auth responses in Safari)' (#12) from fix/login-flow-cache-control into main v1.2.0 andrew 2026-09-14 21:56:59 -04:00
  • 5258e175a1 fix: never cache the login flow (stale pre-auth responses in Safari) lyra 2026-09-14 19:31:29 -04:00
  • 2f7ae31ba1 Merge pull request 'feat: upgrade Symfony 7.4 → 8.1, drop runtime/frankenphp-symfony' (#11) from feat/symfony-8.1-upgrade-plan into main andrew 2026-09-12 16:51:29 -04:00
  • baf976a8e6 feat: restore worker recycle limit via Caddyfile max_requests (default 500) lyra 2026-09-08 06:15:20 -04:00
  • af4d2a4ac7 docs: record Symfony 8.1 upgrade results, update stack references lyra 2026-09-07 22:46:22 -04:00
  • c743a1baac feat: upgrade Symfony 7.4 -> 8.1, drop runtime/frankenphp-symfony lyra 2026-09-07 22:40:17 -04:00
  • 3f1778cd6b docs: add Symfony 7.4 -> 8.1 upgrade plan lyra 2026-09-07 22:26:00 -04:00
  • 33181f11d8 testing branch is safe now that git hook protections have been setup v1.1.5 andrew 2026-08-30 22:24:50 -04:00
  • bb2cc3ce49 only test and push select branches andrew 2026-08-27 21:55:07 -04:00
  • e4f54769e6 use main branch workflow v1.1.4 andrew 2026-08-25 20:22:12 -04:00
  • b75a16a781 Merge remote-tracking branch 'origin/fix/ci-github-rate-limit' into develop v1.1.3 andrew 2026-08-21 16:11:31 -04:00
  • 9111958bcf Merge branch 'main' into develop andrew 2026-08-21 16:10:30 -04:00
  • 95dc6bf0ce Merge branch 'main' into fix/ci-github-rate-limit andrew 2026-08-20 16:27:52 -04:00
  • 472abfdf89 fix(ci): cache composer deps and authenticate to GitHub lyra 2026-08-17 12:03:14 -04:00
  • e2780ca5f6 fix: allow same-origin fetch in CSP when inline login script is used v1.1.2 lyra 2026-08-17 11:27:46 -04:00
  • 7a68c933ce Merge pull request 'fix: handle host-prefixed root path in PublicPathMatcher' (#8) from fix/public-path-host-root into main v1.1.1 andrew 2026-08-13 16:28:05 -04:00
  • 55f8e9e84c Merge branch 'main' into fix/public-path-host-root andrew 2026-08-13 15:43:54 -04:00
  • e3cd8c6739 fix: handle host-prefixed root path in PublicPathMatcher lyra 2026-08-13 14:30:52 -04:00
  • 235a7866b3 fix: remove incorrect CSS escaping on color values lyra 2026-08-13 12:07:20 -04:00
  • c7585e720a feat: add self-bootstrapping dev server script (bin/dev.sh) lyra 2026-08-13 11:56:55 -04:00
  • 66b960ccea Merge pull request 'feat: v1.1 — public rate-limited access' (#5) from feat/v1.1-public-access into main v1.1.0 andrew 2026-08-13 01:30:13 -04:00
  • 17c2d525ff Merge branch 'main' into feat/v1.1-public-access andrew 2026-08-13 01:19:08 -04:00
  • 72c41fec77 Merge pull request 'fix: v1.0 release — security hardening, code quality, and documentation' (#4) from fix/v1.0-must-fix into main v1.0.0 andrew 2026-08-12 22:31:59 -04:00
  • 29e471c536 Merge branch 'fix/v1.0-must-fix' into feat/v1.1-public-access lyra 2026-08-12 11:21:42 -04:00
  • 44e4c60f80 fix: restore develop branch trigger support for CI workflows lyra 2026-08-12 11:21:37 -04:00
  • 5563999525 feat: public rate-limited access for v1.1 lyra 2026-08-12 09:26:50 -04:00
  • 9ad54f8e2a feat: configurable Remote-User header (design consideration 1.2) lyra 2026-08-11 22:48:52 -04:00
  • 2258839bd6 docs: update DESIGN_CONSIDERATIONS.md to reflect addressed items lyra 2026-08-11 17:02:27 -04:00
  • 408d75dda1 chore: nice-to-have improvements for v1.0 lyra 2026-08-11 16:37:23 -04:00
  • b89070e985 fix: should-fix items for v1.0 release lyra 2026-08-11 16:35:27 -04:00
  • d2eb914637 fix: must-fix items for v1.0 release lyra 2026-08-11 16:33:00 -04:00
  • c0bda8aeec Merge pull request 'chore: add php-cs-fixer with PSR-12 config and CI check' (#3) from chore/add-php-cs-fixer into main 0.10.0 andrew 2026-08-11 09:58:51 -04:00
  • cb378e20bc chore: add php-cs-fixer with PSR-12 config and CI check lyra 2026-08-11 08:30:05 -04:00
  • 6b5a711fa9 Fix docs, add .dockerignore, fix base64url padding, fix typo lyra 2026-08-10 18:55:19 -04:00
  • 95ab77db2a added roadmap for where we are aiming to take this project andrew 2026-08-07 09:25:56 -04:00
  • d6bcbf661e Merge pull request 'Add PHPUnit test suite — 222 tests, 100% code coverage' (#1) from Lyra into main 0.9.0 andrew 2026-08-07 09:13:16 -04:00
  • de2a382cbf Add Gitea workflow to run test suite on push and PR lyra 2026-08-07 09:06:32 -04:00
  • 12ba6cde7b Add unit tests for untested edge cases and code paths lyra 2026-08-06 06:10:31 -04:00
  • 6c5a7c98e8 Fix failing functional tests and add test infrastructure lyra 2026-08-06 06:07:14 -04:00
  • 4d314bcb28 Add unit tests for all listeners, the backup-codes command, and test support helpers lyra 2026-08-05 16:55:28 -04:00
  • 890cc225ef Add PHPUnit test suite and supporting infrastructure lyra 2026-08-05 16:52:44 -04:00
  • 3c1253ee45 Merge branch 'develop' 0.8.1 andrew 2026-06-17 13:27:48 -04:00
  • 70bf811b1d gitea action cleanup andrew 2026-06-17 10:55:26 -04:00
  • 3269151e9b new workflow to build and push to docker hub andrew 2026-06-14 15:49:15 -04:00
  • 1da2188bdf Gitea action to sync to GitHub andrew 2026-06-13 21:28:59 -04:00
  • 7cf7e04d17 extracted interfaces for services, to aid in creating tests andrew 2026-06-05 15:15:21 -04:00
  • 0813323ac2 renamed form fields to work better with password managers; fixed bug where an invalid login requests were not being counted as login attempts; preserve username when using central auth 0.8.0 andrew 2026-06-01 16:28:57 -04:00
  • 9114cfd96f update to php 8.5, backup codes, etc. andrew 2026-05-29 21:56:42 -04:00
  • 43e9b7136e auth subdomain tentatively complete. All domain logic moved into service. andrew 2026-05-22 12:43:02 -04:00
  • 38124ef66c First draft of backup codes. only created when the command is called. no command yet to expire/review codes. andrew 2026-05-21 12:15:35 -04:00
  • 6ed1ab26f1 cache persistence improvement, only update keys which have changed. More efficient, and less likely to cause race conditions. 0.7.0 andrew 2026-03-12 17:15:49 -04:00
  • a0dc1a6049 rate-limiting update, now using a compound sliding-window. Continuing to move over to using traits more, and other code cleanup. andrew 2026-03-11 08:27:27 -04:00
  • 3d28485921 Removal of static-secret and totp-lookup. Intending to build support for single-use backup codes. andrew 2026-03-09 16:22:32 -04:00
  • 27394ae555 v0.6.0 optional lookup for totp by static password v0.6.0 andrew 2026-02-10 13:31:09 -05:00
  • c235aad941 single column if narrow enough v0.5.0 andrew 2026-01-17 14:02:23 -05:00
  • b61400085a frontend support for password andrew 2026-01-17 10:57:57 -05:00
  • 4a543f45ca minor nonce related cleanup andrew 2026-01-16 12:17:18 -05:00
  • 4cec5a5963 added project history andrew 2025-12-28 11:14:59 -05:00
  • c3fbb12842 updating readme andrew 2025-12-28 10:38:46 -05:00
  • ac817649ab fixed bug which can occur if you delete cache files. fixed warnings due to volume locations. v0.4.1 andrew 2025-12-26 21:17:36 -05:00
  • 1c4c289d81 massive rewrite to switch to using listeners instead of controller, header for login payload instead of get request, removed icon system, asset system, was able to remove all the domain processing, enhanced cookie security, and more. v0.4.0 andrew 2025-12-23 11:24:47 -05:00
  • b36aabb8a3 WIP: nearly done switching to using header instead of url parameters andrew 2025-12-18 19:20:50 -05:00
  • f486ab7481 already accepted/rejected are now listeners to start cleaning up the massive controller of doom andrew 2025-12-17 15:25:07 -05:00
  • a73d039e10 removed maker-bundle, switching to apcu andrew 2025-12-16 22:34:57 -05:00
  • 102b9f3e78 Full code refactor to Symfony7.4 with FrankenPHP Includes significant breaking changes. Default port and transportation changed to http via port 80 Names of environment variables have changed. v0.3.0 andrew 2025-12-15 12:30:14 -05:00
  • f5a5d63eb7 finished adding rate limiting v0.2.0 andrew 2025-12-03 11:05:32 -05:00
  • f60a81e259 tentatively added rate limiting, block by IP if too many failed login attempts andrew 2025-12-02 22:16:56 -05:00
  • 3bb2d9cecd new page for client error (too many requests).. work in progress andrew 2025-12-01 22:47:36 -05:00
  • 5ebfad604f method in snippet is required andrew 2025-12-01 11:51:08 -05:00
  • e34645eeaa fixed a typo andrew 2025-11-20 11:21:53 -05:00