25 Commits

Author SHA1 Message Date
7a78b8e172 fix: change module name corresponding to version 2025-09-25 19:15:20 +02:00
efeca4a76f feat: custom jwt claims 2025-04-16 15:17:48 +02:00
bc9eece531 feat: allow uuids of any version as user ids 2025-04-16 15:01:43 +02:00
c9684d1fe9 fix: create session in DB for old endpoints (#2052)
* fix: create session in DB for old endpoints

The old endpoints do not store the session in the DB, this leads to an unauthorized error in old hanko elements versions prior 1.0.0 when any endpoint is called that requires a session because they check if the session is stored in the DB.

* test: fix test
2025-02-14 21:00:38 +01:00
9dbc62524a feat: Server side sessions (#1673)
* feat: add server side sessions

* feat: add lastUsed & admin endpoint

* feat: add session list to elements

* fix: fix public session endpoint

* chore: only store session info when enabled

* build: update go mod

* feat: add translations

* test: fix tests

* feat: change path

* feat: return userID on session validation endpoint

* feat: move all session endpoints to public router

* fix: add missing translation

* fix: add missing structs

* chore: align session persister with other persisters

* fix: use correct translation label

* chore: add db validator to session model

* feat: create server side session from cmd

* fix: fix review findings
2024-10-15 11:36:32 +02:00
601ffaae92 Introduce Flowpilot - integration (#1532)
This pull request introduces the new Flowpilot system along with several new features and various improvements. The key enhancements include configurable authorization, registration, and profile flows, as well as the ability to enable and disable user identifiers (e.g., email addresses and usernames) and login methods.

---------

Co-authored-by: Frederic Jahn <frederic.jahn@hanko.io>
Co-authored-by: Lennart Fleischmann <lennart.fleischmann@hanko.io>
Co-authored-by: lfleischmann <67686424+lfleischmann@users.noreply.github.com>
Co-authored-by: merlindru <hello@merlindru.com>
2024-08-06 16:07:29 +02:00
8ab246dc12 feat(jwt): add email claim to session JWT (#1404)
* add email claim which contains email address, is_verified and is_primary values
* cleanup some unused stuff

Closes: #1388

Co-authored-by: Stefan Jacobi <stefan.jacobi@adesso.de>
2024-03-25 15:25:02 +01:00
7ae10a4c4d fix: don't set cookie when jwt is set in header 2023-07-26 11:45:11 +02:00
bfd073013a fix: create audit logs with transaction where useful 2023-07-04 10:48:59 +02:00
b59709d369 refactor: use echo.HTTPError instead of redundant own type. This way the prometheus mw shoul register the correct error codes. 2023-06-19 14:48:45 +02:00
fdf665eabb Session events (#725)
* feat(frontend-sdk): introduce events
* feat(elements): change hanko-elements register function
2023-04-28 14:14:47 +02:00
500cc4e064 fix: remove manual settings of allowed headers 2023-03-09 12:00:13 +01:00
a820ccd3bb try: comment out Acces-Control-Expose-Header 2023-03-09 11:53:46 +01:00
3dedce746c feat: make limits for passcode/password separately configurable. Document the changes. 2023-01-23 14:45:58 +01:00
fb7801647a feat: add basic rate limiting in password login 2023-01-23 11:56:56 +01:00
6dfbd68896 Merge branch 'main' into add-audit-logs
# Conflicts:
#	backend/go.mod
#	backend/go.sum
2022-10-13 08:49:20 +02:00
b20582ecbe fix(hanko-frontend-sdk): access X-Auth-Token header during cross-doma… (#251)
* fix(hanko-frontend-sdk): access X-Auth-Token header during cross-domain operations only
2022-10-12 18:07:29 +02:00
b73067b07e chore: rename audit log client 2022-09-27 09:51:13 +02:00
f02bccb685 feat: add audit logs 2022-08-18 16:53:34 +02:00
4fa8e53c53 fix(hanko-js): set cross-domain cookie when using the XMLHttpRequest API (#160)
* fix(hanko-js): set cross-domain cookie when using the XMLHttpRequest API
2022-08-03 13:44:13 +02:00
067ca8d755 feat: handle auth-token header and create cross domain cookies (#135)
feat: handle auth-token header and create cross domain cookies
2022-07-28 14:35:44 +02:00
bd50dea37e fix: check min & max length of a password before login & set new password 2022-06-30 16:47:08 +02:00
4de446475f fix: fix module path 2022-06-21 12:36:11 +02:00
3e46664406 feat: improve error logging 2022-06-15 17:24:54 +02:00
80048acd8f refactor: move backend files to its own directory 2022-06-09 14:36:00 +02:00