OneAuth

Commit Graph

Author	SHA1	Message	Date
veypi	46f01afc9f	feat(auth): Improve OAuth callback and add memory cache fallback - Add random avatar generation for new users in register - Fix OAuth state parsing with type assertions and error handling - Add TempToken field to CallbackResponse for bind flow - Implement dynamic redirect URI resolution with X-Forwarded headers support - Add memory cache fallback when Redis is unavailable - Change default port from 4001 to 4000 in Makefile	3 weeks ago
veypi	a7ffd15601	refactor: Remove multi-tenant org system and simplify auth - Delete org API endpoints (add_member, create, del, get, list, member, patch, tree) - Delete models/org.go and remove Org/OrgMember models - Delete org-related test files (org_crud, org_load_middleware, org_permission, multi_tenant) - Delete org test scripts (03_org_permission.sh, 04_org_load_middleware.sh) - Simplify auth/auth.go by removing org context and role loading logic - Remove org claims from JWT tokens and login/register responses - Redesign Permission model with hierarchical level-based access control - Add auth/design.md with new permission system specification - Update user and role APIs to work without org context	4 weeks ago
veypi	c588962485	fix: Add input validation and OAuth client access control - Add username validation (required, 3-50 chars, alphanumeric + underscore) - Add password validation (required, minimum 8 characters) - Add email format validation using regex - Add owner check in OAuth client update and delete operations - Allow admin users with wildcard permission to access all organizations	4 weeks ago
veypi	4a316e6d67	fix(api/auth): reset count variable before uniqueness checks Fix a bug where the count variable was not reset before checking email and phone uniqueness. This could cause false positives if a previous check had count > 0, incorrectly reporting that email or phone already exists when they don't. - Reset count to 0 before email check - Reset count to 0 before phone check	1 month ago
veypi	23c7f6cb7a	refactor(auth): 重构认证系统，支持多种验证方式和 OAuth 提供商管理 - 新增验证模块(api/verification)，统一处理短信和邮件验证码发送 - 新增邮件发送功能(libs/email)，支持 SMTP 协议 - 重构短信模块(libs/sms)，简化阿里云和腾讯云短信接口 - 新增 OAuth 提供商管理 API(api/oauth/providers)，支持 CRUD 操作 - 新增系统设置管理 API(api/settings)，支持动态配置更新 - 重构认证方式管理(api/auth/methods)，支持启用/禁用多种登录方式 - 删除旧的 sms_providers 和 sms API 模块，迁移至新验证体系 - 新增数据库模型：verification、email、oauth_provider、oauth_templates、setting - 更新配置文档，增加新功能的使用说明	1 month ago
veypi	8b2a1aba3b	refactor: 统一API错误类型处理	1 month ago
veypi	5daab97008	fix bug	1 month ago
veypi	52f2ae35ab	upgrade new version	1 month ago

8 Commits (e83444df4c8347951178f8e50b2435c6130ae3fd)