Commit Graph

28 Commits (9e04049632e63f1cf53535773f170c1aa5af7168)

Author SHA1 Message Date
memoclaw 92d937b1aa
feat: replace auto-increment ID with UID for identity provider resource names (#5687)
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
4 months ago
Johnny 7932f6d0d0
refactor: user auth improvements (#5360) 6 months ago
Johnny d14e66daf5
fix: openapi generation (#5349) 6 months ago
Johnny 1a9bd32cf1 feat(auth): add PKCE support and enhance OAuth security
Implements critical OAuth 2.0 security improvements to protect against authorization code interception attacks and improve provider compatibility:

- Add PKCE (RFC 7636) support with SHA-256 code challenge/verifier
- Fix access token extraction to use standard field instead of Extra()
- Add OAuth error parameter handling (access_denied, invalid_scope, etc.)
- Maintain backward compatibility for non-PKCE flows

This brings the OAuth implementation up to modern security standards as recommended by Auth0, Okta, and the OAuth 2.0 Security Best Current Practice (RFC 8252).

Backend changes:
- Add code_verifier parameter to ExchangeToken with PKCE support
- Use token.AccessToken for better provider compatibility
- Update proto definition with optional code_verifier field

Frontend changes:
- Generate cryptographically secure PKCE parameters
- Include code_challenge in authorization requests
- Handle and display OAuth provider errors gracefully
- Pass code_verifier during token exchange

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
7 months ago
Steven b4ea7d843f feat: enhance memo sorting functionality to support multiple fields 8 months ago
github-actions[bot] 074c580214 chore: bump gomark
- Bump protoc-gen-go version from v1.36.8 to v1.36.9 in multiple generated files.
- Enhance OpenAPI descriptions for various endpoints to improve clarity and readability.
- Fix typo in the description list handling in the markdown service.
- Update HTMLElement component to handle children and self-closing tags correctly.
- Modify types in the markdown service to include children and self-closing properties for HTML elements.
9 months ago
Johnny 7cc2df9254 chore: fix linter 10 months ago
Liu Chao ba7dfb7d98
fix: OpenAPI Parameter Conflict in DeleteMemoTag Endpoint (#4985)
Signed-off-by: ChaoLiu <chaoliu719@gmail.com>
10 months ago
johnnyjoy 1fffc41f79 feat: sliding expiration for user sessions 1 year ago
Steven 42d1650c6d chore: tweak auth service 1 year ago
Johnny 9b15936873 refactor: clean unused fields 1 year ago
Steven 5821bb7a65 chore: update auth service 1 year ago
Johnny 741fe35c2a refactor: rename session methods in auth service 1 year ago
Steven d71fd2f84a refactor: auth service 1 year ago
johnnyjoy ca79990679 refactor: merge sign in requests 1 year ago
Anubhav Singh a63d9b471b
feat: update ItalicNode to use repeated children instead of content (#4566)
* feat: update ItalicNode to use repeated children instead of content

* chore: update gomark dependency to latest version

---------

Co-authored-by: Anubhav Singh <anubhav@mail.techindika.com>
1 year ago
johnnyjoy 13f6fa7b37 refactor: remove default visibility in workspace setting 1 year ago
johnnyjoy 2058a8ab7b chore: move references to memo property 1 year ago
Steven edc3f1d9d9 chore: retire unused memo view 1 year ago
johnnyjoy 65da94521d chore: buf generate 1 year ago
johnnyjoy a78bfffb17 chore: add output only flag 2 years ago
Johnny e913271f15
refactor: move tags from property to payload (#4229)
* refactor: move tags from property to payload

* chore: fix tests

* chore: drop memo tags

* chore: update

---------

Co-authored-by: Steven <stevenlgtm@gmail.com>
2 years ago
Steven 7b70c203cc chore: buf generate 2 years ago
Steven e527b6a878 feat: move reaction type to setting 2 years ago
Johnny 736637a362
feat: add public flag instead of system setting to enable signup (#3589) 2 years ago
Steven d0655ece53 refactor: update memo tags 2 years ago
Steven ff175bbb7e refactor: update resource binary request handler 2 years ago
Steven 1b291422e7 refactor: api version 2 years ago