Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

MeB OAuth - latest iteration #477

Open
wants to merge 93 commits into
base: master
Choose a base branch
from
Open

MeB OAuth - latest iteration #477

wants to merge 93 commits into from

Commits on Aug 30, 2024

  1. Create new OAuth login page 

    Initial commit with basic HTML + CSS
    @MonkeyDo @amCap1712
    MonkeyDo authored and amCap1712 committed Aug 30, 2024
    Configuration menu
    Copy the full SHA
    6639879 View commit details
    Browse the repository at this point in the history

  2. Use more generic css class names 

     so that we can use the same styles for the signup (create account) page
    @MonkeyDo @amCap1712
    MonkeyDo authored and amCap1712 committed Aug 30, 2024
    Configuration menu
    Copy the full SHA
    ca77eec View commit details
    Browse the repository at this point in the history

  3. Add initial signup page

    @MonkeyDo @amCap1712
    MonkeyDo authored and amCap1712 committed Aug 30, 2024
    Configuration menu
    Copy the full SHA
    ec32347 View commit details
    Browse the repository at this point in the history

  4. Small improvements of the signup page 

    + made some links real
    @MonkeyDo @amCap1712
    MonkeyDo authored and amCap1712 committed Aug 30, 2024
    Configuration menu
    Copy the full SHA
    3a24b94 View commit details
    Browse the repository at this point in the history

  5. Bigger TOC modal

    @MonkeyDo @amCap1712
    MonkeyDo authored and amCap1712 committed Aug 30, 2024
    Configuration menu
    Copy the full SHA
    fe3e68e View commit details
    Browse the repository at this point in the history

  6. Improve login/signup logos

    @MonkeyDo @amCap1712
    MonkeyDo authored and amCap1712 committed Aug 30, 2024
    Configuration menu
    Copy the full SHA
    8c6ab8c View commit details
    Browse the repository at this point in the history

  7. Change sign in page header

    @MonkeyDo @amCap1712
    MonkeyDo authored and amCap1712 committed Aug 30, 2024
    Configuration menu
    Copy the full SHA
    ad1f7fa View commit details
    Browse the repository at this point in the history

  8. Fix typos

    @amCap1712
    amCap1712 committed Aug 30, 2024
    Configuration menu
    Copy the full SHA
    425e882 View commit details
    Browse the repository at this point in the history

  9. Initial Login System

    @amCap1712
    amCap1712 committed Aug 30, 2024
    Configuration menu
    Copy the full SHA
    b65403b View commit details
    Browse the repository at this point in the history

  10. Add errors to login forms

    @amCap1712
    amCap1712 committed Aug 30, 2024
    Configuration menu
    Copy the full SHA
    5f46ea2 View commit details
    Browse the repository at this point in the history

  11. Remove user to supporter throughout the codebase - 2 

    Rename the actual tables and some changes that I missed the last time around.
    @amCap1712
    amCap1712 committed Aug 30, 2024
    Configuration menu
    Copy the full SHA
    0727b5d View commit details
    Browse the repository at this point in the history

  12. Initial OAuth Work commit

    @amCap1712
    amCap1712 committed Aug 30, 2024
    Configuration menu
    Copy the full SHA
    5406520 View commit details
    Browse the repository at this point in the history

  13. Add CodeChallenge extension to authorization code flow

    @amCap1712
    amCap1712 committed Aug 30, 2024
    Configuration menu
    Copy the full SHA
    f9fa516 View commit details
    Browse the repository at this point in the history

  14. Add ImplicitGrant

    @amCap1712
    amCap1712 committed Aug 30, 2024
    Configuration menu
    Copy the full SHA
    30cd2a2 View commit details
    Browse the repository at this point in the history

  15. Add RefreshTokenGrant

    @amCap1712
    amCap1712 committed Aug 30, 2024
    Configuration menu
    Copy the full SHA
    ff71f97 View commit details
    Browse the repository at this point in the history

  16. Add revocation endpoint

    @amCap1712
    amCap1712 committed Aug 30, 2024
    Configuration menu
    Copy the full SHA
    4700ac1 View commit details
    Browse the repository at this point in the history

  17. second commit

    @amCap1712
    amCap1712 committed Aug 30, 2024
    Configuration menu
    Copy the full SHA
    28f444c View commit details
    Browse the repository at this point in the history

  18. Update models

    @amCap1712
    amCap1712 committed Aug 30, 2024
    Configuration menu
    Copy the full SHA
    0af3895 View commit details
    Browse the repository at this point in the history

  19. misc updates

    @amCap1712
    amCap1712 committed Aug 30, 2024
    Configuration menu
    Copy the full SHA
    ad9d678 View commit details
    Browse the repository at this point in the history

  20. update authlib and implementation

    @amCap1712
    amCap1712 committed Aug 30, 2024
    Configuration menu
    Copy the full SHA
    dc44709 View commit details
    Browse the repository at this point in the history

  21. more updates

    @amCap1712
    amCap1712 committed Aug 30, 2024
    Configuration menu
    Copy the full SHA
    6cb6885 View commit details
    Browse the repository at this point in the history

  22. misc fixes

    @amCap1712
    amCap1712 committed Aug 30, 2024
    Configuration menu
    Copy the full SHA
    a7827d9 View commit details
    Browse the repository at this point in the history

  23. misc fixes - 2

    @amCap1712
    amCap1712 committed Aug 30, 2024
    Configuration menu
    Copy the full SHA
    7697bec View commit details
    Browse the repository at this point in the history

  24. add introspection endpoint

    @amCap1712
    amCap1712 committed Aug 30, 2024
    Configuration menu
    Copy the full SHA
    320d110 View commit details
    Browse the repository at this point in the history

  25. fix return

    @amCap1712
    amCap1712 committed Aug 30, 2024
    Configuration menu
    Copy the full SHA
    33168eb View commit details
    Browse the repository at this point in the history

  26. fix bugs

    @amCap1712
    amCap1712 committed Aug 30, 2024
    Configuration menu
    Copy the full SHA
    7ff6a54 View commit details
    Browse the repository at this point in the history

  27. Create dummy oauth."user" table

    @amCap1712
    amCap1712 committed Aug 30, 2024
    Configuration menu
    Copy the full SHA
    2ac29e6 View commit details
    Browse the repository at this point in the history

  28. temp fix for create_tables oauth

    @amCap1712
    amCap1712 committed Aug 30, 2024
    Configuration menu
    Copy the full SHA
    63d0ccb View commit details
    Browse the repository at this point in the history

  29. fix before_first_request

    @amCap1712
    amCap1712 committed Aug 30, 2024
    Configuration menu
    Copy the full SHA
    913ea21 View commit details
    Browse the repository at this point in the history

  30. fix before_first_request -2

    @amCap1712
    amCap1712 committed Aug 30, 2024
    Configuration menu
    Copy the full SHA
    8eeb00a View commit details
    Browse the repository at this point in the history

  31. fix ISEs and oauth setup

    @amCap1712
    amCap1712 committed Aug 30, 2024
    Configuration menu
    Copy the full SHA
    0c7affc View commit details
    Browse the repository at this point in the history

  32. Rename OAuth2User to "user"

    @amCap1712
    amCap1712 committed Aug 30, 2024
    Configuration menu
    Copy the full SHA
    d9383c9 View commit details
    Browse the repository at this point in the history

  33. Remove old ouath stuff, minor touch-ups, ready for first full test drive

    @amCap1712
    amCap1712 committed Aug 30, 2024
    Configuration menu
    Copy the full SHA
    a388a01 View commit details
    Browse the repository at this point in the history

  34. more fixes after testing

    @amCap1712
    amCap1712 committed Aug 30, 2024
    Configuration menu
    Copy the full SHA
    fa3e43e View commit details
    Browse the repository at this point in the history

  35. more signup improvements

    @amCap1712
    amCap1712 committed Aug 30, 2024
    Configuration menu
    Copy the full SHA
    eaf8c12 View commit details
    Browse the repository at this point in the history

  36. working prototype

    @amCap1712
    amCap1712 committed Aug 30, 2024
    Configuration menu
    Copy the full SHA
    f8cfad1 View commit details
    Browse the repository at this point in the history

  37. add email update for users

    @amCap1712
    amCap1712 committed Aug 30, 2024
    Configuration menu
    Copy the full SHA
    b41f2d8 View commit details
    Browse the repository at this point in the history

  38. token scope fixes

    @amCap1712
    amCap1712 committed Aug 30, 2024
    Configuration menu
    Copy the full SHA
    287b64d View commit details
    Browse the repository at this point in the history

  39. Reactify sign up and profile forms 

    Use formik library to aid in reactifying the forms. This is useful in providing
form validation feedback to the user without requiring the user to submit it first.
    @amCap1712
    amCap1712 committed Aug 30, 2024
    Configuration menu
    Copy the full SHA
    750ff0e View commit details
    Browse the repository at this point in the history

  40. Reactify user sign up, login, forgot/reset password/username forms

    @amCap1712
    amCap1712 committed Aug 30, 2024
    Configuration menu
    Copy the full SHA
    6da816b View commit details
    Browse the repository at this point in the history

  41. Reactify user profile edit form

    @amCap1712
    amCap1712 committed Aug 30, 2024
    Configuration menu
    Copy the full SHA
    053f7b7 View commit details
    Browse the repository at this point in the history

  42. Reactify oauth app create/edit forms

    @amCap1712
    amCap1712 committed Aug 30, 2024
    Configuration menu
    Copy the full SHA
    f9b67c3 View commit details
    Browse the repository at this point in the history

  43. Add redirects to login/signup

    @amCap1712
    amCap1712 committed Aug 30, 2024
    Configuration menu
    Copy the full SHA
    c73dc3b View commit details
    Browse the repository at this point in the history

  44. sql file cleanup

    @amCap1712
    amCap1712 committed Aug 30, 2024
    Configuration menu
    Copy the full SHA
    dcbf4d0 View commit details
    Browse the repository at this point in the history

  45. Revert user data migration related changes 

    We'll be doing only OAuth apps migration first.
    @amCap1712
    amCap1712 committed Aug 30, 2024
    Configuration menu
    Copy the full SHA
    8459364 View commit details
    Browse the repository at this point in the history

  46. Move OAuth files to different top-level directory

    @amCap1712
    amCap1712 committed Aug 30, 2024
    Configuration menu
    Copy the full SHA
    f6b065b View commit details
    Browse the repository at this point in the history

  47. oauth fixes and isolation

    @amCap1712
    amCap1712 committed Aug 30, 2024
    Configuration menu
    Copy the full SHA
    2d4c15d View commit details
    Browse the repository at this point in the history

  48. wolf deploy

    @amCap1712
    amCap1712 committed Aug 30, 2024
    Configuration menu
    Copy the full SHA
    daf645a View commit details
    Browse the repository at this point in the history

  49. wolf deploy - 2

    @amCap1712
    amCap1712 committed Aug 30, 2024
    Configuration menu
    Copy the full SHA
    95d2bea View commit details
    Browse the repository at this point in the history

  50. wolf deploy - 3

    @amCap1712
    amCap1712 committed Aug 30, 2024
    Configuration menu
    Copy the full SHA
    a5f76d8 View commit details
    Browse the repository at this point in the history

  51. wolf deploy - 4

    @amCap1712
    amCap1712 committed Aug 30, 2024
    Configuration menu
    Copy the full SHA
    9932a09 View commit details
    Browse the repository at this point in the history

  52. interim checkin 

    multiple fixes and draft test suite
    @amCap1712
    amCap1712 committed Aug 30, 2024
    Configuration menu
    Copy the full SHA
    e3bd952 View commit details
    Browse the repository at this point in the history

  53. add tests for authorization code grant

    @amCap1712
    amCap1712 committed Aug 30, 2024
    Configuration menu
    Copy the full SHA
    5370dd7 View commit details
    Browse the repository at this point in the history

  54. add tests for pkce extension

    @amCap1712
    amCap1712 committed Aug 30, 2024
    Configuration menu
    Copy the full SHA
    8db084a View commit details
    Browse the repository at this point in the history

  55. add tests for refresh grant

    @amCap1712
    amCap1712 committed Aug 30, 2024
    Configuration menu
    Copy the full SHA
    c185b8e View commit details
    Browse the repository at this point in the history

  56. add tests for introspection endpoint

    @amCap1712
    amCap1712 committed Aug 30, 2024
    Configuration menu
    Copy the full SHA
    5f16207 View commit details
    Browse the repository at this point in the history

  57. refactor refresh token storage and add tests for token revocation

    @amCap1712
    amCap1712 committed Aug 30, 2024
    Configuration menu
    Copy the full SHA
    e3bf014 View commit details
    Browse the repository at this point in the history

  58. refactor tests

    @amCap1712
    amCap1712 committed Aug 30, 2024
    Configuration menu
    Copy the full SHA
    849b4fb View commit details
    Browse the repository at this point in the history

  59. fix form warnings

    @amCap1712
    amCap1712 committed Aug 30, 2024
    Configuration menu
    Copy the full SHA
    fe398d4 View commit details
    Browse the repository at this point in the history

  60. Add approval prompt

    @amCap1712
    amCap1712 committed Aug 30, 2024
    Configuration menu
    Copy the full SHA
    28d1825 View commit details
    Browse the repository at this point in the history

  61. fix prompt page form and unify login user lookup

    @amCap1712
    amCap1712 committed Aug 30, 2024
    Configuration menu
    Copy the full SHA
    13b12db View commit details
    Browse the repository at this point in the history

  62. misc fixes

    @amCap1712
    amCap1712 committed Aug 30, 2024
    Configuration menu
    Copy the full SHA
    4b93cab View commit details
    Browse the repository at this point in the history

  63. add more tests for client revokation and token expiry

    @amCap1712
    amCap1712 committed Aug 30, 2024
    Configuration menu
    Copy the full SHA
    c54a466 View commit details
    Browse the repository at this point in the history

  64. misc fixes for test deployment

    @amCap1712
    amCap1712 committed Aug 30, 2024
    Configuration menu
    Copy the full SHA
    437e360 View commit details
    Browse the repository at this point in the history

  65. fix loading user from MB

    @amCap1712
    amCap1712 committed Aug 30, 2024
    Configuration menu
    Copy the full SHA
    f78546d View commit details
    Browse the repository at this point in the history

  66. misc fixes

    @amCap1712
    amCap1712 committed Aug 30, 2024
    Configuration menu
    Copy the full SHA
    4bb8c4f View commit details
    Browse the repository at this point in the history

  67. misc fixes - 2

    @amCap1712
    amCap1712 committed Aug 30, 2024
    Configuration menu
    Copy the full SHA
    04457fb View commit details
    Browse the repository at this point in the history

  68. misc improvements 

    security hardening by detecting code reuse, adding arbitrary fragment. improved
token format. made static resources work in dev and prod.
    @amCap1712
    amCap1712 committed Aug 30, 2024
    Configuration menu
    Copy the full SHA
    0f9d2f5 View commit details
    Browse the repository at this point in the history

  69. add post method to authorization endpoint - 2 

    add post method to authorization endpoint
    @amCap1712
    amCap1712 committed Aug 30, 2024
    Configuration menu
    Copy the full SHA
    a62bf81 View commit details
    Browse the repository at this point in the history

  70. add security headers to oauth2 blueprint

    @amCap1712
    amCap1712 committed Aug 30, 2024
    Configuration menu
    Copy the full SHA
    ebe028c View commit details
    Browse the repository at this point in the history

  71. add form post response mode

    @amCap1712
    amCap1712 committed Aug 30, 2024
    Configuration menu
    Copy the full SHA
    06e253f View commit details
    Browse the repository at this point in the history

  72. revoke tokens if old refresh token is used

    @amCap1712
    amCap1712 committed Aug 30, 2024
    Configuration menu
    Copy the full SHA
    85435bb View commit details
    Browse the repository at this point in the history

  73. do not auto approve for implicit grant

    @amCap1712
    amCap1712 committed Aug 30, 2024
    Configuration menu
    Copy the full SHA
    5c35f9f View commit details
    Browse the repository at this point in the history

  74. add more tests

    @amCap1712
    amCap1712 committed Aug 30, 2024
    Configuration menu
    Copy the full SHA
    fcdb514 View commit details
    Browse the repository at this point in the history

  75. refactor tests

    @amCap1712
    amCap1712 committed Aug 30, 2024
    Configuration menu
    Copy the full SHA
    7243681 View commit details
    Browse the repository at this point in the history

  76. remove post authentication from authorize endpoint 

    need to look into security concerns about previous oauth attempts' data left
in session. because the post data needs to be saved in session while the user is
redirected to login. considered server side sessions but not sure if its enough.
will probably need timestamps and some hashing to invalidate and careful checks
to ensure data between two requests is not mixed. not worth the pains for now.
    @amCap1712
    amCap1712 committed Aug 30, 2024
    Configuration menu
    Copy the full SHA
    00af984 View commit details
    Browse the repository at this point in the history

  77. Add header tests

    @amCap1712
    amCap1712 committed Aug 30, 2024
    Configuration menu
    Copy the full SHA
    f601784 View commit details
    Browse the repository at this point in the history

  78. remove post authentication tests

    @amCap1712
    amCap1712 committed Aug 30, 2024
    Configuration menu
    Copy the full SHA
    dcd10c7 View commit details
    Browse the repository at this point in the history

  79. add tests for access token and refresh token format

    @amCap1712
    amCap1712 committed Aug 30, 2024
    Configuration menu
    Copy the full SHA
    cf10335 View commit details
    Browse the repository at this point in the history

  80. fix delete application and improve delete flow

    @amCap1712
    amCap1712 committed Aug 30, 2024
    Configuration menu
    Copy the full SHA
    85ed247 View commit details
    Browse the repository at this point in the history

  81. allow any client to introspect any token

    @amCap1712
    amCap1712 committed Aug 30, 2024
    Configuration menu
    Copy the full SHA
    36e0d3d View commit details
    Browse the repository at this point in the history

  82. Fix applications page table overflow

    @MonkeyDo @amCap1712
    MonkeyDo authored and amCap1712 committed Aug 30, 2024
    Configuration menu
    Copy the full SHA
    835d2db View commit details
    Browse the repository at this point in the history

Commits on Sep 12, 2024

  1. temp fixes for local development

    @amCap1712
    amCap1712 committed Sep 12, 2024
    Configuration menu
    Copy the full SHA
    3277a35 View commit details
    Browse the repository at this point in the history

  2. Git-ignore frontend dist folder

    @MonkeyDo
    MonkeyDo committed Sep 12, 2024
    Configuration menu
    Copy the full SHA
    faa3220 View commit details
    Browse the repository at this point in the history

  3. Update free account type display

    @MonkeyDo
    MonkeyDo committed Sep 12, 2024
    Configuration menu
    Copy the full SHA
    ea6fae8 View commit details
    Browse the repository at this point in the history

  4. Fix button style

    @MonkeyDo
    MonkeyDo committed Sep 12, 2024
    Configuration menu
    Copy the full SHA
    96ae241 View commit details
    Browse the repository at this point in the history

Commits on Sep 13, 2024

  1. Prefill donation form if user is logged in

    @amCap1712
    amCap1712 committed Sep 13, 2024
    Configuration menu
    Copy the full SHA
    1a731bc View commit details
    Browse the repository at this point in the history

  2. Add prefill for donation amount, currency and editor

    @amCap1712
    amCap1712 committed Sep 13, 2024
    Configuration menu
    Copy the full SHA
    d55b3e4 View commit details
    Browse the repository at this point in the history

Commits on Sep 23, 2024

  1. Merge branch 'master' into new-new-oauth

    @amCap1712
    amCap1712 committed Sep 23, 2024
    Configuration menu
    Copy the full SHA
    425bde0 View commit details
    Browse the repository at this point in the history

Commits on Oct 24, 2024

  1. remove unneeded env vars

    @amCap1712
    amCap1712 committed Oct 24, 2024
    Configuration menu
    Copy the full SHA
    e218d89 View commit details
    Browse the repository at this point in the history

Commits on Nov 1, 2024

  1. fix tests and local setup

    @amCap1712
    amCap1712 committed Nov 1, 2024
    Configuration menu
    Copy the full SHA
    4a5a22d View commit details
    Browse the repository at this point in the history

Commits on Nov 5, 2024

  1. update prod container setup

    @amCap1712
    amCap1712 committed Nov 5, 2024
    Configuration menu
    Copy the full SHA
    0786d7a View commit details
    Browse the repository at this point in the history

  2. fix rc.local permissions

    @amCap1712
    amCap1712 committed Nov 5, 2024
    Configuration menu
    Copy the full SHA
    7271352 View commit details
    Browse the repository at this point in the history