48 commits

Author	SHA1	Message	Date
Skip R	1ca066c15b	auth/error: split field summary logic into method	2026-07-07 20:54:36 -07:00
Skip R	7061d2109f	auth/error: add ACCOUNT_COMPROMISED_RESET_PASSWORD error code	2026-07-07 20:43:04 -07:00
Skip R	2541cc2f56	auth/error: add AnyFieldHasError utility	2026-07-07 20:42:43 -07:00
Skip R	aab23b50bf	auth/error: check all field errors for the code	2026-07-07 20:25:46 -07:00
Skip R	ab65bb659a	auth/machine: test IP verification via SMS	2026-07-07 20:16:58 -07:00
Skip R	c88b84dc84	auth/machine: handle expired IP verification tokens	2026-07-07 20:16:58 -07:00
Skip R	a9fab25784	auth/error: consider InvalidVerificationCode to be a user input error	2026-07-07 20:16:58 -07:00
Skip R	b5dad96026	auth/error: add more codes	2026-07-07 20:16:58 -07:00
Skip R	740ca9e29d	auth/machine: support IP verification via code sent to phone via SMS	2026-07-07 20:16:58 -07:00
Skip R	f2565dda83	auth: widen criteria for user input error detection ... This is to make detection of user input errors more reliable, especially with phone verification support coming up soon.	2026-07-07 19:50:16 -07:00
Skip R	869e9f2519	auth/machine: support one level of re-entrancy & sequencing more ops	2026-07-07 18:58:18 -07:00
Skip R	3f7fd707df	auth: remove unused imports	2026-07-07 18:55:09 -07:00
Skip R	fba984b489	auth: fix static checks	2026-07-07 17:25:52 -07:00
Skip R	02982000be	auth/machine: don't expose POST helper	2026-07-07 17:12:35 -07:00
Skip R	3921bb1f1b	auth/machine: add captcha tests	2026-07-07 17:12:35 -07:00
Skip R	892aede394	auth/machine: turn into a resumable state machine	2026-07-07 17:12:35 -07:00
Skip R	e1adfc5179	auth/machine: implement login location verification	2026-06-16 16:52:37 -07:00
Skip R	2b487d3025	transport: apply TLS impersonation more broadly ... * all API REST requests, remoteauth (QR), and auth machine now impersonate properly * gateway dial is still left	2026-06-12 05:03:51 -07:00
Skip R.	185a12a48e	[bridgev2] first pass at proxy support (#228)	2026-06-12 03:05:01 -07:00
Skip R	cac3a11000	auth: retry on bad MFA creds	2026-06-10 22:25:54 -07:00
Skip R	c12aaa46d3	auth/machine: don't clobber fingerprint when retrying	2026-06-10 22:24:08 -07:00
Skip R	62091bfc2a	auth: impersonate chrome	2026-06-02 18:12:20 -07:00
Skip R	1595e76434	discordauth: send installation id	2026-06-02 17:00:28 -07:00
Skip R	7ee769714e	auth/error: present form errors in String()	2026-04-14 22:38:55 -07:00
Skip R	81a99e9dda	auth/error: define INVALID_LOGIN code	2026-04-14 22:33:02 -07:00
Skip R	85072b04bf	remove stale fixme comments	2026-04-14 20:31:45 -07:00
Skip R	d6d91c415c	auth: document how backup codes are presented	2026-04-14 20:23:46 -07:00
Skip R	bef6e4b9e8	auth: add sequence diagram	2026-04-07 21:29:29 -07:00
Skip R	032ac4440b	auth: support inspection of form field errors	2026-04-07 20:14:53 -07:00
Skip R	0c28feadea	auth: add POST request helper	2026-04-06 23:33:15 -07:00
Skip R	a62136eae2	auth/machine: handle err	2026-03-27 21:11:11 -07:00
Skip R	26546297bb	auth: implement MFA for TOTP, SMS, and backup codes ... * create ChallengeHandler interface that clients must implement * support asking discord to send the user's phone an SMS code	2026-03-27 21:07:59 -07:00
Skip R	04fbf2870b	auth: move X-Debug-Options to Personality	2026-03-26 22:21:36 -07:00
Skip R	356b66224e	auth: move header constants to their respective files	2026-03-26 22:16:28 -07:00
Skip R	99b25c58f9	auth: add filter to log headers	2026-03-26 22:08:20 -07:00
Skip R	2df7bf7886	auth: comment	2026-03-26 22:08:05 -07:00
Skip R	9ac70fd1bd	auth: simplify nil slice check	2026-03-26 21:17:15 -07:00
Skip R	754159ed81	auth: add some focused tests	2026-03-26 21:17:15 -07:00
Skip R	65478d4424	auth: set outgoing Content-Type	2026-03-26 21:17:15 -07:00
Skip R	bb787717ee	auth: actually log fingerprint if filter permits it	2026-03-26 21:17:15 -07:00
Skip R	8a98bd2b25	auth: fix log message	2026-03-26 21:17:15 -07:00
Skip R	6f148b0bbf	auth: actually send x-debug-options	2026-03-26 21:17:15 -07:00
Skip R	a58e88cf93	auth/personality: fix marshal infinite recursion	2026-03-26 21:17:14 -07:00
Skip R	a627d2d510	auth/sensitive: impl unmarshaler	2026-03-26 21:02:43 -07:00
Skip R	d8f3ed3e36	auth: return login response	2026-03-26 20:51:29 -07:00
Skip R	289f92660f	auth: add API errors	2026-03-26 20:51:19 -07:00
Skip R	654e3fd898	auth: remove channel	2026-03-26 20:19:24 -07:00
Skip R	82b1645e00	auth: add initial sketch	2026-03-26 20:18:16 -07:00