ab5c85c4f5
fix: add numbers to username regex
2025-05-04 23:25:48 +02:00
e29940d080
feat: only allow lowercase usernames
2025-05-03 03:04:07 +02:00
b530de8f52
fix: username regex
2025-05-03 02:20:37 +02:00
bcf857d6b2
refactor: flatten login function
ci/woodpecker/push/build-and-publish Pipeline was successful
2025-05-02 20:32:13 +02:00
0d07af7d79
feat: style: return unauthorized when token isnt found and flatten function structure
ci/woodpecker/push/build-and-publish Pipeline was successful
2025-05-02 19:26:37 +02:00
1d7cdf343b
feat: add users endpoint and add me and uuid under it
...
ci/woodpecker/push/build-and-publish Pipeline failed
Adds a users endpoint that returns all users on the server, will require instance permissions in future.
Place previous user requests under users to avoid having multiple endpoints.
2025-05-02 19:19:59 +02:00
c76fd73179
refactor: move regex code to mod.rs
2025-05-02 16:22:30 +02:00
97f7595cc5
style: cargo clippy and format
ci/woodpecker/push/build-and-publish Pipeline was successful
2025-05-02 15:20:22 +02:00
481c2c3648
feat: use a logging library
...
ci/woodpecker/push/build-and-publish Pipeline was successful
gives us logs from actix and sqlx that otherwise arent exposed to us
2025-05-02 01:18:13 +02:00
22ab3d8a04
feat: add a way to revoke refresh_tokens using device_name
2025-05-01 20:19:39 +02:00
a89d705239
feat: use device_name in refresh_tokens table
2025-05-01 20:19:18 +02:00
c009d578a7
perf: optimize user fetching code
2025-05-01 20:18:39 +02:00
705abeb643
fix: fix password regex
...
this should probably be moved to its own function so we can change it on the fly
2025-05-01 20:17:59 +02:00
2864196584
perf: avoid cloning when checking access
2025-05-01 20:12:02 +02:00
7b86706793
perf: dont needlessly update uuid in token
2025-05-01 19:19:35 +02:00
aea640a64c
style: use the same response for login/register
2025-05-01 19:18:44 +02:00
0b25e3fb87
feat: add user lookup to api
...
lets you use an access token and a uuid to look up users on the instance
2025-05-01 07:06:58 +02:00
83872ed7a6
feat: add a function to check access token
...
lets me reuse something that will happen often instead of having to write it manually in every file
2025-05-01 07:06:14 +02:00
0b516a269d
fix: remove unused import
2025-05-01 07:04:56 +02:00
725a16d1f5
feat: integrate token authentication
2025-05-01 05:01:25 +02:00
1d0f8ecd00
feat: add refresh endpoint
2025-05-01 03:54:26 +02:00
b4469a6317
feat: prepare for access/refresh tokens in register
2025-05-01 03:54:26 +02:00
91398ecd5b
style: move auth to own folder
2025-05-01 03:54:26 +02:00
87edb9dd12
feat: implement argon2id and expect passwords to be pre-hashed
2025-04-30 21:36:22 +02:00
3461218025
feat: add bogus login
2025-04-30 19:17:14 +02:00
a8886f616a
fix: remove unused import
2025-04-30 19:16:58 +02:00
bda9f85b86
feat: query user creation instead of using .execute on pool
...
This should increase security of the operation a ton, need to test if an escape is still possible
2025-04-30 11:12:01 +00:00
0f1824b366
fix: query actual number of accounts
2025-04-30 11:10:25 +00:00
11f89a2380
docs: add todos/fixmes
2025-04-29 22:13:41 +02:00
70577fbe56
fix: remove unused variable from register
2025-04-29 22:00:28 +02:00
19bad249d4
feat: user registration
...
Adds crates and code for user registration, this is EXTREMELY INSECURE AND FOR TESTING ONLY
2025-04-29 21:54:41 +02:00
bebad3be9b
style: cargo fmt
2025-04-29 00:43:43 +02:00
96250864af
refactor: use unwrap_or() instead of unwrap_or_else()
2025-04-29 00:42:11 +02:00
f090fbafe7
Create initial api
2025-04-28 23:20:37 +02:00
