Commit History
-
Move vars to dynamic, add metrics (#1085)
Unverified signature* Add healthcheck route * Add prom client with basic metrics * wip: serve metrics on a different port * exclude server from tsconfig * latest * refacto(all): use class & singleton * refacto(all): use class & singleton * refacto(all): add request logs * Make all the env vars dynamic (#1092) * Add truncate to task model (#1090) * retry text area height (#1091) * Make all the env vars dynamic * only check for db at runtime * remove secret from build step * improve dockerfile * Wrap db in singleton * add .env.local to dockerignore * changes to dockerfile * lint * aborted generations * move collections build check * Use a single dockerfile * lint * fixes * lint * don't return db during building * remove dev --------- Co-authored-by: Victor Muštar <victor.mustar@gmail.com> * refacto(all): update default metrics port * fix recursion error * add version check * revert vite preview * Move request …98b1c51
-
Use pino for logs (#1086)
Unverified signature* Use pino for logs * Use logger for info * Add errorId to the logsddbe7d2
-
set `sameSite` to `lax` when allowing insecure cookies (#1078)
Unverified signaturebc30bd1
-
Add `ALLOW_INSECURE_COOKIES` feature flag (#1076)
Unverified signaturede2df1a
-
Enhance Dynamic User Attribute Handling in OIDC Integration (#885)
Chang Chi, Meng +2: nsarrazin, ‘XGungo’ Unverified signature* Refactor `updateUser` to Support Dynamic `nameClaim` Configuration * style: run Prettier to fix lint errors * Validate NAME_CLAIM in OIDConfig schema * Refactor userData parsing --------- Co-authored-by: Nathan Sarrazin <sarrazin.nathan@gmail.com> Co-authored-by: ‘XGungo’ <‘daniel2000890311g@gmail.com’>c6129c3
-
[JS] use shorthand notation (#711)
MishigUnverified signature* [JS] use shorthand notation * add `"object-shorthand": ["error", "always"],` * fix "Expected method shorthand object-shorthand" * formatd5559df
-
Use JSON5 for parsing all config vars (#671)
Unverified signaturef09c5f3
-
Session management improvements: Multi sessions, renew on login/logout (#603)
Unverified signature* wip: update sessionId on every login * comment out object.freeze * only refresh cookies on post * Add support for multiple sessions per user * fix tests * 🛂 Hash sessionId in DB * 🐛 do not forget about event.locals.sessionId * Update src/lib/server/auth.ts Co-authored-by: Eliott C. <coyotte508@gmail.com> * Add `expiresAt` field * remove index causing errors * Fix bug where sessions were not properly being deleted on logout * Moved session refresh outside of form content check --------- Co-authored-by: coyotte508 <coyotte508@gmail.com>e4a770a
-
Feature/add OIDC optional tolerance and resource (#496)
itaybar +1: nsarrazin Unverified signature* Added optional tolerance for OIDC jwt * Added optional OIDC resource for authorizationURL * Refactored open id params with zod --------- Co-authored-by: Nathan Sarrazin <sarrazin.nathan@gmail.com>e69cb4a
-
feat openid login with google (#250)
Unverified signatureCo-authored-by: coyotte508 <coyotte508@gmail.com>fa3b3b4
-
🐛 Fix "signin with HF" within space + CSRF (#236)
Eliott CUnverified signature767afa7
-
Login flow (#193)
Adrien Denat +2: Eliott C., victor Unverified signature* replace EthicsModal by LoginModal and start binding auth logic * start implementing login modal + give a try to @auth/sveltekit using Github oauth as a test * start custom auth implementation instead of auth.js for consistency with moon-landing * fetch user data from provider * add migration from anonymous to user + bind frontend * add missing auth secret + only migrate conversations for pre-existing users * remove email scope as it's not needed Co-authored-by: Eliott C. <coyotte508@gmail.com> * no need to define .well-known path Co-authored-by: Eliott C. <coyotte508@gmail.com> * use env var for hf hub website url * move sessionId to signature on csrf token exchange * remove ethic modal check and set default settings on new users * anonymous users can read only + modal on write tries * refresh session cookie when existing user signin again rather than use the old one * allow users to keep using the app without loging-in if env var is no…64d3841
-
✨ Backend preparation for "Sign in with HF" (#190)
Eliott CUnverified signature2e28042