Michael Mayer
02a1b12edb
Config: Update CORS header defaults and add /api/v1/echo endpoint #3931
...
Signed-off-by: Michael Mayer <michael@photoprism.app>
2024-01-16 14:36:08 +01:00
Michael Mayer
fed1d8ad95
Auth: Accept access token as passwd with fail rate limit #782 #808 #3943
...
Signed-off-by: Michael Mayer <michael@photoprism.app>
2024-01-14 18:28:17 +01:00
Michael Mayer
0e4d81853c
API: Add .well-known/oauth-authorization-server route handler #808 #3943
...
This commit also adds an /api/v1/oauth/logout endpoint that allows
clients to delete their sessions (access tokens) as needed.
Signed-off-by: Michael Mayer <michael@photoprism.app>
2024-01-08 14:53:39 +01:00
Michael Mayer
f8e0615cc8
Auth: Ensure backwards compatibility for existing API clients #808 #3943
...
These changes ensure that the new (SHA256) session ID is returned in the
"session_id" field, so that developers have time to update their client
implementations to use the new "access_token" field.
Signed-off-by: Michael Mayer <michael@photoprism.app>
2024-01-07 12:25:56 +01:00
Michael Mayer
0d2f8be522
Auth: Use hashed auth tokens for enhanced security #3943 #808 #782
...
Signed-off-by: Michael Mayer <michael@photoprism.app>
2024-01-06 17:35:19 +01:00
Michael Mayer
8df444dfd7
Auth: Refactor session API #98
...
Signed-off-by: Michael Mayer <michael@photoprism.app>
2023-03-10 12:15:10 +01:00
Michael Mayer
f5a8c5a45d
Auth: Session and ACL enhancements #98 #1746
...
Signed-off-by: Michael Mayer <michael@photoprism.app>
2022-09-28 09:01:17 +02:00
Michael Mayer
85561547cc
Auth: Add "PHOTOPRISM_ADMIN_USER" option and refactor user table #98
...
Signed-off-by: Michael Mayer <michael@photoprism.app>
2022-09-02 21:30:50 +02:00
Timo Volkmann
daf81b20ee
Auth: fix wrong api test init sequence #98
2021-08-11 12:57:54 +02:00
Michael Mayer
371a9b3c45
Run make fmt
2021-08-11 11:01:14 +02:00
Timo Volkmann
3829377824
Auth: fixed typo in tests
2021-08-11 10:47:52 +02:00
Timo Volkmann
dd0ee298cd
Auth: added api tests for user sessions #98
2021-08-10 17:22:15 +02:00
Michael Mayer
5daa689975
Backend: Format go imports
2020-11-21 18:08:41 +01:00
Michael Mayer
226f218f80
Backend: Count login attempts and localize error messages
...
Signed-off-by: Michael Mayer <michael@liquidbytes.net>
2020-09-21 09:40:35 +02:00
Theresa Gresch
2db97ef168
Backend: Add unit tests for internal/api
2020-07-14 15:05:03 +02:00
Michael Mayer
5d59b50912
Sharing: ACL authorization for REST API #18
...
Signed-off-by: Michael Mayer <michael@liquidbytes.net>
2020-06-25 14:54:04 +02:00
Michael Mayer
1f1f92408a
Sharing: Token authentication #18
...
Signed-off-by: Michael Mayer <michael@liquidbytes.net>
2020-06-25 01:20:58 +02:00
Theresa Gresch
ff505579ec
Backend: Add tests to internal/api
2020-05-06 12:56:13 +02:00
