Skip R
005afd448c
auth/machine: log converted errors
2026-08-02 19:43:57 -07:00
Skip R
86da1edd6c
auth/error: don't consider "compromised account" error to be input error
2026-07-15 16:28:28 -07:00
Skip R
3fc2e39b88
auth/machine: explicitly check for correct answer field
2026-07-15 16:26:40 -07:00
Skip R
ae24c77e02
auth/machine: clear interrupt req if IP auth token is invalid
...
Otherwise, the interrupt req takes priority (it always does this by
design) and the user doesn't actually get to log in from scratch again,
they just get stuck in a loop forever.
2026-07-15 16:09:11 -07:00
Skip R
1ca066c15b
auth/error: split field summary logic into method
2026-07-07 20:54:36 -07:00
Skip R
7061d2109f
auth/error: add ACCOUNT_COMPROMISED_RESET_PASSWORD error code
2026-07-07 20:43:04 -07:00
Skip R
2541cc2f56
auth/error: add AnyFieldHasError utility
2026-07-07 20:42:43 -07:00
Skip R
aab23b50bf
auth/error: check all field errors for the code
2026-07-07 20:25:46 -07:00
Skip R
ab65bb659a
auth/machine: test IP verification via SMS
2026-07-07 20:16:58 -07:00
Skip R
c88b84dc84
auth/machine: handle expired IP verification tokens
2026-07-07 20:16:58 -07:00
Skip R
a9fab25784
auth/error: consider InvalidVerificationCode to be a user input error
2026-07-07 20:16:58 -07:00
Skip R
b5dad96026
auth/error: add more codes
2026-07-07 20:16:58 -07:00
Skip R
740ca9e29d
auth/machine: support IP verification via code sent to phone via SMS
2026-07-07 20:16:58 -07:00
Skip R
f2565dda83
auth: widen criteria for user input error detection
...
This is to make detection of user input errors more reliable, especially
with phone verification support coming up soon.
2026-07-07 19:50:16 -07:00
Skip R
869e9f2519
auth/machine: support one level of re-entrancy & sequencing more ops
2026-07-07 18:58:18 -07:00
Skip R
3f7fd707df
auth: remove unused imports
2026-07-07 18:55:09 -07:00
Skip R
fba984b489
auth: fix static checks
2026-07-07 17:25:52 -07:00
Skip R
02982000be
auth/machine: don't expose POST helper
2026-07-07 17:12:35 -07:00
Skip R
3921bb1f1b
auth/machine: add captcha tests
2026-07-07 17:12:35 -07:00
Skip R
892aede394
auth/machine: turn into a resumable state machine
2026-07-07 17:12:35 -07:00
Skip R
e1adfc5179
auth/machine: implement login location verification
2026-06-16 16:52:37 -07:00
Skip R
2b487d3025
transport: apply TLS impersonation more broadly
...
* all API REST requests, remoteauth (QR), and auth machine now
impersonate properly
* gateway dial is still left
2026-06-12 05:03:51 -07:00
Skip R.
185a12a48e
[bridgev2] first pass at proxy support ( #228 )
2026-06-12 03:05:01 -07:00
Skip R
cac3a11000
auth: retry on bad MFA creds
2026-06-10 22:25:54 -07:00
Skip R
c12aaa46d3
auth/machine: don't clobber fingerprint when retrying
2026-06-10 22:24:08 -07:00
Skip R
62091bfc2a
auth: impersonate chrome
2026-06-02 18:12:20 -07:00
Skip R
1595e76434
discordauth: send installation id
2026-06-02 17:00:28 -07:00
Skip R
7ee769714e
auth/error: present form errors in String()
2026-04-14 22:38:55 -07:00
Skip R
81a99e9dda
auth/error: define INVALID_LOGIN code
2026-04-14 22:33:02 -07:00
Skip R
85072b04bf
remove stale fixme comments
2026-04-14 20:31:45 -07:00
Skip R
d6d91c415c
auth: document how backup codes are presented
2026-04-14 20:23:46 -07:00
Skip R
bef6e4b9e8
auth: add sequence diagram
2026-04-07 21:29:29 -07:00
Skip R
032ac4440b
auth: support inspection of form field errors
2026-04-07 20:14:53 -07:00
Skip R
0c28feadea
auth: add POST request helper
2026-04-06 23:33:15 -07:00
Skip R
a62136eae2
auth/machine: handle err
2026-03-27 21:11:11 -07:00
Skip R
26546297bb
auth: implement MFA for TOTP, SMS, and backup codes
...
* create ChallengeHandler interface that clients must implement
* support asking discord to send the user's phone an SMS code
2026-03-27 21:07:59 -07:00
Skip R
04fbf2870b
auth: move X-Debug-Options to Personality
2026-03-26 22:21:36 -07:00
Skip R
356b66224e
auth: move header constants to their respective files
2026-03-26 22:16:28 -07:00
Skip R
99b25c58f9
auth: add filter to log headers
2026-03-26 22:08:20 -07:00
Skip R
2df7bf7886
auth: comment
2026-03-26 22:08:05 -07:00
Skip R
9ac70fd1bd
auth: simplify nil slice check
2026-03-26 21:17:15 -07:00
Skip R
754159ed81
auth: add some focused tests
2026-03-26 21:17:15 -07:00
Skip R
65478d4424
auth: set outgoing Content-Type
2026-03-26 21:17:15 -07:00
Skip R
bb787717ee
auth: actually log fingerprint if filter permits it
2026-03-26 21:17:15 -07:00
Skip R
8a98bd2b25
auth: fix log message
2026-03-26 21:17:15 -07:00
Skip R
6f148b0bbf
auth: actually send x-debug-options
2026-03-26 21:17:15 -07:00
Skip R
a58e88cf93
auth/personality: fix marshal infinite recursion
2026-03-26 21:17:14 -07:00
Skip R
a627d2d510
auth/sensitive: impl unmarshaler
2026-03-26 21:02:43 -07:00
Skip R
d8f3ed3e36
auth: return login response
2026-03-26 20:51:29 -07:00
Skip R
289f92660f
auth: add API errors
2026-03-26 20:51:19 -07:00