OptimusX
/
OneAuth
mirror of https://github.com/veypi/OneAuth.git
3
0
Fork 0
Code Issues Projects Releases Wiki Activity
261 Commits
4 Branches
2 Tags
26 MiB
v4
master
v3
v2
v1.1.0
v1.1.1
Branches Tags
${ item.name }
Create tag ${ searchTerm }
Create branch ${ searchTerm }
from 'c79cd1f2d5'
${ noResults }
Commit Graph

9 Commits (c79cd1f2d50bd6e1743c6bf0fd89df949720dc91)

Author SHA1 Message Date
veypi 92156dcd53 feat(auth): Improve permission system and role management 
- Add Scope and Level fields to UserPermissionInfo response
    - Include role-based permissions in /auth/me endpoint
    - Implement diff-based permission sync for role initialization
    - Remove Scope field from Role model queries (create, patch, grant)
    - Add permission-based route guards in UI (perm: '*')
    - Fix register to return error on default role assignment failure
    - Fix token refresh to only fetch user when token exists
    - Fix code formatting in api/init.go (remove extra spaces)
 2 months ago
veypi 46f01afc9f feat(auth): Improve OAuth callback and add memory cache fallback 
- Add random avatar generation for new users in register
    - Fix OAuth state parsing with type assertions and error handling
    - Add TempToken field to CallbackResponse for bind flow
    - Implement dynamic redirect URI resolution with X-Forwarded headers support
    - Add memory cache fallback when Redis is unavailable
    - Change default port from 4001 to 4000 in Makefile
 2 months ago
veypi a7ffd15601 refactor: Remove multi-tenant org system and simplify auth 
- Delete org API endpoints (add_member, create, del, get, list, member, patch, tree)
    - Delete models/org.go and remove Org/OrgMember models
    - Delete org-related test files (org_crud, org_load_middleware, org_permission, multi_tenant)
    - Delete org test scripts (03_org_permission.sh, 04_org_load_middleware.sh)
    - Simplify auth/auth.go by removing org context and role loading logic
    - Remove org claims from JWT tokens and login/register responses
    - Redesign Permission model with hierarchical level-based access control
    - Add auth/design.md with new permission system specification
    - Update user and role APIs to work without org context
 2 months ago
veypi c588962485 fix: Add input validation and OAuth client access control 
- Add username validation (required, 3-50 chars, alphanumeric + underscore)
    - Add password validation (required, minimum 8 characters)
    - Add email format validation using regex
    - Add owner check in OAuth client update and delete operations
    - Allow admin users with wildcard permission to access all organizations
 2 months ago
veypi 4a316e6d67 fix(api/auth): reset count variable before uniqueness checks 
Fix a bug where the count variable was not reset before checking
email and phone uniqueness. This could cause false positives if
a previous check had count > 0, incorrectly reporting that email
or phone already exists when they don't.

- Reset count to 0 before email check
- Reset count to 0 before phone check
 2 months ago
veypi 23c7f6cb7a refactor(auth): 重构认证系统，支持多种验证方式和 OAuth 提供商管理 
- 新增验证模块(api/verification)，统一处理短信和邮件验证码发送
    - 新增邮件发送功能(libs/email)，支持 SMTP 协议
    - 重构短信模块(libs/sms)，简化阿里云和腾讯云短信接口
    - 新增 OAuth 提供商管理 API(api/oauth/providers)，支持 CRUD 操作
    - 新增系统设置管理 API(api/settings)，支持动态配置更新
    - 重构认证方式管理(api/auth/methods)，支持启用/禁用多种登录方式
    - 删除旧的 sms_providers 和 sms API 模块，迁移至新验证体系
    - 新增数据库模型：verification、email、oauth_provider、oauth_templates、setting
    - 更新配置文档，增加新功能的使用说明
 2 months ago
veypi 8b2a1aba3b refactor: 统一API错误类型处理 2 months ago
veypi 5daab97008 fix bug 2 months ago
veypi 52f2ae35ab upgrade new version 2 months ago