325 Commits

Author	SHA1	Message	Date
Hugh Nimmo-Smith	61b14a08b3	Make the introspection endpoint return JSON error responses	2022-12-14 16:33:27 +01:00
Quentin Gliech	a475a9a164	Make the compat login use the new password manager	2022-12-14 16:04:36 +01:00
Quentin Gliech	533cabe005	Use the new password manager	2022-12-14 16:04:36 +01:00
Quentin Gliech	ff2f009b0e	Password schemes configuration	2022-12-14 16:04:36 +01:00
Quentin Gliech	a6c3951d8c	Start a modular password manager	2022-12-14 16:04:36 +01:00
Quentin Gliech	56d43b0166	storage: finish cleaning up the errors	2022-12-08 15:29:15 +01:00
Quentin Gliech	0ea9089f7f	template: more cleanups	2022-12-08 15:29:15 +01:00
Quentin Gliech	13b1ac7c83	policy: define custom errors and ditch anyhow	2022-12-08 15:29:15 +01:00
Quentin Gliech	68890b7291	handlers: remove most usage of anyhow	2022-12-08 15:29:15 +01:00
Quentin Gliech	a836cc864a	storage: unify most of the remaining errors	2022-12-08 15:29:15 +01:00
Quentin Gliech	102571512e	storage: unify most oauth2 related errors	2022-12-08 15:29:15 +01:00
Quentin Gliech	b7cad48bbd	storage: unify user operations errors	2022-12-08 15:29:15 +01:00
Quentin Gliech	f7f65e314b	storage: unify the compat login errors	2022-12-08 15:29:15 +01:00
Quentin Gliech	1ddc05ff01	storage: start unifying database errors	2022-12-08 15:29:15 +01:00
Quentin Gliech	12ce2a3d04	data-model: simplify the authorization grants and sessions	2022-12-08 15:29:15 +01:00
Quentin Gliech	92d6f5b087	data-model: simplify the oauth2 clients	2022-12-08 15:29:15 +01:00
Quentin Gliech	6d82199910	Resolve clippy errors	2022-12-08 15:29:15 +01:00
Quentin Gliech	479e009931	data-model: simplify the compat sessions	2022-12-08 15:29:15 +01:00
Quentin Gliech	feebbd0e97	data-model: simplify users and sessions	2022-12-08 15:29:15 +01:00
Quentin Gliech	23fd833d45	Save the post auth action during upstream OAuth login	2022-12-05 19:39:51 +01:00
Quentin Gliech	4d93f4d4f0	Refactor the upstream oauth session cookie	2022-12-05 19:39:51 +01:00
Quentin Gliech	989e464dd0	WIP: Provider list on the login page	2022-12-05 19:39:51 +01:00
Quentin Gliech	2e7112ef13	GraphQL API	2022-12-05 19:39:51 +01:00
Quentin Gliech	07636dd9e7	Tidy up upstream linking templates	2022-12-05 19:39:51 +01:00
Quentin Gliech	fcb6190a56	Simplify route error handling	2022-12-05 19:39:51 +01:00
Quentin Gliech	28bfce7e45	Save the ID token during an upstream authorization	2022-12-05 19:39:51 +01:00
Quentin Gliech	bf432a31e1	OIDC account linking and login	2022-12-05 19:39:51 +01:00
Quentin Gliech	22a337cd45	WIP: handle account linking	2022-12-05 19:39:51 +01:00
Quentin Gliech	cde9187adc	Lookup and save upstream links	2022-12-05 19:39:51 +01:00
Quentin Gliech	4227fa7a83	Add a global HTTP client factory	2022-12-05 19:39:51 +01:00
Quentin Gliech	16088fc11c	Refactor the provider client credentials extraction	2022-12-05 19:39:51 +01:00
Quentin Gliech	bedcf44741	WIP: upstream OIDC provider support	2022-12-05 19:39:51 +01:00
Quentin Gliech	95a879585b	Make the OIDC issuer a string instead of a URL	2022-12-02 18:04:07 +01:00
Quentin Gliech	0ca4366f75	Use associated error type in claims validator instead of anyhow.	2022-12-01 14:34:19 +01:00
Quentin Gliech	809f836bb4	Migrate to axum 0.6.0-rc.5	2022-11-21 15:04:16 +01:00
Quentin Gliech	9c0ece7512	Do not embed the templates and static files in the binary	2022-11-18 22:37:55 +01:00
Quentin Gliech	834214bcac	Do not embed the WASM-compiled policies in the binary	2022-11-18 22:37:55 +01:00
Quentin Gliech	c76a1dd2e7	Bump the latest axum rc	2022-11-18 14:57:22 +01:00
Quentin Gliech	78778648ca	Allow fetching more nodes by their IDs	2022-11-18 13:43:01 +01:00
Quentin Gliech	13c7d2772f	Move the GraphQL schema to its own crate	2022-11-09 19:17:12 +01:00
Quentin Gliech	c13b0478e6	Initial GraphQL API	2022-11-09 19:17:12 +01:00
Quentin Gliech	eeb442b6d0	Bump rustc to 1.65	2022-11-03 21:56:58 +01:00
Quentin Gliech	ba3379434d	Generate a random secret on client registration	2022-11-02 18:59:00 +01:00
Quentin Gliech	8ccc23cc47	Better userinfo error codes	2022-11-02 18:59:00 +01:00
Quentin Gliech	2d2127dcdb	More cleanups	2022-11-02 18:59:00 +01:00
Quentin Gliech	368a9282a1	Cleanups	2022-11-02 18:59:00 +01:00
Quentin Gliech	b7c50b5403	Pass time and RNG in CSRF verification methods	2022-11-02 18:59:00 +01:00
Quentin Gliech	f1aa42fae4	Disallow Ulid generation without explicit timestamp and rng	2022-11-02 18:59:00 +01:00
Quentin Gliech	559181c2c3	Pass the rng and clock around	2022-11-02 18:59:00 +01:00
Quentin Gliech	5580179537	Better logging of user-related DB operations ... Also fixes a bug where the user would get redirected to the wrong URL for verifying their email address	2022-11-02 18:59:00 +01:00