37 Commits

Author SHA1 Message Date
7a78b8e172 fix: change module name corresponding to version 2025-09-25 19:15:20 +02:00
c40897ac09 feat: always persist sessions server-side, config adjustments (#1997)
* feat: always persist sessions server-side, config adjustments
2024-12-20 09:52:52 +01:00
21fd1d460f Feat custom user handle (#1978)
Add a custom user handle to a webauthn credential

---------

Co-authored-by: bjoern-m <56024829+bjoern-m@users.noreply.github.com>
2024-12-05 15:26:22 +01:00
9dbc62524a feat: Server side sessions (#1673)
* feat: add server side sessions

* feat: add lastUsed & admin endpoint

* feat: add session list to elements

* fix: fix public session endpoint

* chore: only store session info when enabled

* build: update go mod

* feat: add translations

* test: fix tests

* feat: change path

* feat: return userID on session validation endpoint

* feat: move all session endpoints to public router

* fix: add missing translation

* fix: add missing structs

* chore: align session persister with other persisters

* fix: use correct translation label

* chore: add db validator to session model

* feat: create server side session from cmd

* fix: fix review findings
2024-10-15 11:36:32 +02:00
8ab246dc12 feat(jwt): add email claim to session JWT (#1404)
* add email claim which contains email address, is_verified and is_primary values
* cleanup some unused stuff

Closes: #1388

Co-authored-by: Stefan Jacobi <stefan.jacobi@adesso.de>
2024-03-25 15:25:02 +01:00
a35725c69c Merge branch 'main' into fix/1027-improve-passkey-naming 2024-01-31 14:00:58 +01:00
97ba5cff99 1030 - Refactor SMTP settings to be outside of passcode config (#1121)
* 1030 - Refactor SMTP settings to be outside of passcode config

* Backwards compatibility of SMTP settings

* Do not error if root smtp and passcode smtp are defined. Log warning instead

* Update warning message
2024-01-30 09:34:10 +01:00
fc55df9a8b fix(tests): fix missing constructor extension for aaguid map
Closes: #1027
2024-01-29 09:43:21 +01:00
d81c8f9a74 feat: check webauthn session data expiry 2023-08-04 09:30:48 +02:00
7ae10a4c4d fix: don't set cookie when jwt is set in header 2023-07-26 11:45:11 +02:00
e7dc097baf feat: make user verification configurable, preferred as default 2023-07-20 17:53:24 +02:00
086333d7f3 refactor: speed up tests, maybe? 2023-06-19 14:57:16 +02:00
b59709d369 refactor: use echo.HTTPError instead of redundant own type. This way the prometheus mw shoul register the correct error codes. 2023-06-19 14:48:45 +02:00
d292bdac46 test: fix test 2023-06-12 15:11:36 +02:00
17fd70a7e8 test: fix webauthn test 2023-06-05 16:28:52 +02:00
0e3820166c test: fix build 2023-06-05 11:20:32 +02:00
3cdcfc10a9 test: remove unnecessary string formats 2023-05-31 12:05:01 +02:00
b6da9902d5 test: improve webauthn handler test 2023-05-31 11:42:05 +02:00
3a8f171596 Merge remote-tracking branch 'origin/main' into feat-simplify-config 2023-04-12 17:50:37 +02:00
cb272a829a Merge branch 'main' into test-improve-integration-tests
# Conflicts:
#	backend/handler/public_router.go
2023-04-12 16:13:07 +02:00
332f73dbd0 fix: fix merge conflicts. adapt to thirdparty-x-domain pr 2023-04-12 09:46:20 +02:00
f02e6c6790 feat: social login in a cross domain setting 2023-04-11 16:41:12 +02:00
afdfa4ad7d test: start integration improvement 2023-03-31 09:00:16 +02:00
55fafdb988 fix: Remove Deprecated Origin Field. Use Origins instead. BREAKING CHANGE 2023-03-08 11:58:19 +01:00
e7a5c2df27 Feat: Add logout method to sdk (#566)
* Add endpoint to invalidate HTTP-Only cookie from the backend

* Add methods to the UserClient SDK for logout

* Remove session token fetch and add unit test for logout

* Update public router to use JWT middleware

* Add logout button to frontend. Route back to login page once logout is successful.

* Add a logout failur event

* Update logout logic in SDK

* Remove unneeded endpoint from main.go

* Update logoutlink reference

* Fix request path; undo change in package order

* Update common.css to incldue hanko-logout

* feat(fronend-sdk): remove cookie during cross-domain operations

* fix(frontend-sdk): No unauthorized error during logout, when the user is already logged out

* feat(backend): Create an audit log entry when the user logs off

* chore(frontend-sdk): re-generate jsdoc

* fix: Adjust logout response codes and the corresponding frontend sdk error handling

* chore(frontend-sdk): re-generate jsdoc

* feat: add logout endpoint specification to the docs

* Fix broken unit test

* Remove logout button from elements

* Add event listener on frontend to call the logout method from SDK

* Rollback changes to SecuredContent on e2e tests

* Update logout test on user

* Update quickstart/public/assets/css/common.css

Co-authored-by: bjoern-m <56024829+bjoern-m@users.noreply.github.com>

---------

Co-authored-by: Björn Müller <bjoern.mueller@hanko.io>
Co-authored-by: bjoern-m <56024829+bjoern-m@users.noreply.github.com>
2023-03-03 10:48:33 +01:00
eec7a473a5 feat: add third party integrations
add third party integrations
2023-02-23 13:05:05 +01:00
1a5c0671b5 test: fix webauthn handler test 2023-02-06 14:21:26 +01:00
ca62cf421f feat: introduce hanko profile element and related api changes (#495)
* feat: introduce hanko profile element and related api changes
2023-01-25 10:55:23 +01:00
1f6edcf6de feat: remove platform attachment requirement on registration 2022-11-23 14:57:36 +01:00
b73067b07e chore: rename audit log client 2022-09-27 09:51:13 +02:00
f02bccb685 feat: add audit logs 2022-08-18 16:53:34 +02:00
067ca8d755 feat: handle auth-token header and create cross domain cookies (#135)
feat: handle auth-token header and create cross domain cookies
2022-07-28 14:35:44 +02:00
e0b51e4df5 Feat: android support (#145)
* chore(backend): use 'ResidentKeyRequirementPreferred' during credential registration
* chore(hanko-js): hide passkey button on android
2022-07-21 09:58:57 +02:00
99d679bc1d fix(backend): correct webauthn authentication test 2022-06-27 17:21:18 +02:00
4de446475f fix: fix module path 2022-06-21 12:36:11 +02:00
3e46664406 feat: improve error logging 2022-06-15 17:24:54 +02:00
80048acd8f refactor: move backend files to its own directory 2022-06-09 14:36:00 +02:00