Spaces:
Runtime error
Runtime error
Commit History
-
Add COUPLE_SESSION_WITH_COOKIE_NAME env var (#1881)
Eliott C.Unverified signature* Add COUPLE_SESSION_WITH_COOKIE_NAME env var This means the user's session will be reset if the value of the coupled cookie name changes. Useful if the app is deployed on a subpath of another site, and you want to reset the session when the auth for the user changes * fix test3199efb
-
refactor: new API & universal load functions (pt. 2) (#1847)
Unverified signature* feat(API): refactor API with Elysia * feat: initial elysia setup * feat: replace conv/[id] load function with universal * fix: delete v1 catchall * wip * fix: response type * fix: add cors * feat: more routes in tools & assistants * refacto: use normal svelte fetch in `/assistant/[assistantId]` * refacto: use normal svelte fetch in `conversation/[id]` * feat: use universal load function for `tools/[toolId]` * wip: removing more server load function stuff * feat: more routes to universal load functions * feat: more routes to universal * refactor: move tools loading to API endpoint * refactor(api): implement tools search API endpoint and move load function * fix: types on tool search * refactor: update assistant route and remove redundant page load function * refactor(api): move assistants page load function to api call * refactor(settings): remove waterfall loading * refactor: main load function * fix: types * feat: improve fetchJSON to handle empty responses * …612f16b -
Revert "refactor: new API & universal load functions (#1743)"
This reverts commit 7961ae74d12cc62461929d92aca0adac48b72d9a.813f132 -
refactor: new API & universal load functions (#1743)
Unverified signature* feat(API): refactor API with Elysia * feat: initial elysia setup * feat: replace conv/[id] load function with universal * fix: delete v1 catchall * wip * fix: response type * fix: add cors * feat: more routes in tools & assistants * refacto: use normal svelte fetch in `/assistant/[assistantId]` * refacto: use normal svelte fetch in `conversation/[id]` * feat: use universal load function for `tools/[toolId]` * wip: removing more server load function stuff * feat: more routes to universal load functions * feat: more routes to universal * refactor: move tools loading to API endpoint * refactor(api): implement tools search API endpoint and move load function * fix: types on tool search * refactor: update assistant route and remove redundant page load function * refactor(api): move assistants page load function to api call * refactor(settings): remove waterfall loading * refactor: main load function * fix: types * feat: improve fetchJSON to handle empty responses * …50aea0a
-
feat: allow storing env variable in DB (#1802)
Unverified signature* feat(config): wip, make config controllable from DB, public side for now * fix: build * feat(config): add config manager env var toggle * wip: make backend config use config manager * fix: typechecks * fix: circular import * refactor: init hook sveltekit * fix: disable config manager during tests * refactor: use enum for semaphore, move delete from auto after 60s to separate `deleteAt` field * feat: config manager checks for updates on requests * fix: config script exit * fix: remove top-level awaits * fix: script await * feat: filter config keys based on public environment variables for more security * fix: change import to type for public environment variables48059af
-
fix: set alg in auth if not set by user
Unverified signatureefdd3cf
-
feat: explicit config of id token alg (#1567) (#1568)
drewtoto +2: dt-ati, nsarrazin Unverified signature* feat: explicit config of id token alg (#1567) - support to configure `id_token_signed_response_alg` field in the configuration object passed to `issuer.Client` in `src/lib/server/auth.ts`. - allow `id_token_signed_response_alg` to be set from environment variable `OIDConfig.ID_TOKEN_SIGNED_RESPONSE_ALG` or obtained via OP metadata during issuer discovery when `RS256` is not included. * fix: refacto a bit, narrow types and add zod validation --------- Co-authored-by: Drew Toto <drew_toto@alliedtelesis.com> Co-authored-by: Nathan Sarrazin <sarrazin.nathan@gmail.com>b611f21
-
fix: default auth not properly treated if undefined
907104b
-
feat(security): add cookie samesite & security settings (#1517)
Unverified signatureff0caae
-
Major bump to sveltekit & node-adapter versions (#1395)
Unverified signature* version bump * sveltekit2 bump * formatting * fix imports * fix deps * minor bump on chat-ui itself * better error logging * bump svelte-check version06feee8
-
fix: parse ISS if returned in OIDC flow (#1162)
Guido Muscioni +1: nsarrazin Unverified signaturefix: parse iss and pass when available Co-authored-by: Nathan Sarrazin <sarrazin.nathan@gmail.com>0fcb8db
-
Move vars to dynamic, add metrics (#1085)
Unverified signature* Add healthcheck route * Add prom client with basic metrics * wip: serve metrics on a different port * exclude server from tsconfig * latest * refacto(all): use class & singleton * refacto(all): use class & singleton * refacto(all): add request logs * Make all the env vars dynamic (#1092) * Add truncate to task model (#1090) * retry text area height (#1091) * Make all the env vars dynamic * only check for db at runtime * remove secret from build step * improve dockerfile * Wrap db in singleton * add .env.local to dockerignore * changes to dockerfile * lint * aborted generations * move collections build check * Use a single dockerfile * lint * fixes * lint * don't return db during building * remove dev --------- Co-authored-by: Victor Muštar <victor.mustar@gmail.com> * refacto(all): update default metrics port * fix recursion error * add version check * revert vite preview * Move request logs to debug level and add an env var to filter by log level in d…a8a9533
-
Use pino for logs (#1086)
Unverified signature* Use pino for logs * Use logger for info * Add errorId to the logs486ffa7
-
set `sameSite` to `lax` when allowing insecure cookies (#1078)
Unverified signature002aebe
-
Add `ALLOW_INSECURE_COOKIES` feature flag (#1076)
Unverified signature9c0ebc6
-
Enhance Dynamic User Attribute Handling in OIDC Integration (#885)
Chang Chi, Meng +2: nsarrazin, ‘XGungo’ Unverified signature* Refactor `updateUser` to Support Dynamic `nameClaim` Configuration * style: run Prettier to fix lint errors * Validate NAME_CLAIM in OIDConfig schema * Refactor userData parsing --------- Co-authored-by: Nathan Sarrazin <sarrazin.nathan@gmail.com> Co-authored-by: ‘XGungo’ <‘daniel2000890311g@gmail.com’>3f0bce1
-
[JS] use shorthand notation (#711)
MishigUnverified signature* [JS] use shorthand notation * add `"object-shorthand": ["error", "always"],` * fix "Expected method shorthand object-shorthand" * format347b211
-
Use JSON5 for parsing all config vars (#671)
Unverified signature20a343f
-
Session management improvements: Multi sessions, renew on login/logout (#603)
Unverified signature* wip: update sessionId on every login * comment out object.freeze * only refresh cookies on post * Add support for multiple sessions per user * fix tests * 🛂 Hash sessionId in DB * 🐛 do not forget about event.locals.sessionId * Update src/lib/server/auth.ts Co-authored-by: Eliott C. <coyotte508@gmail.com> * Add `expiresAt` field * remove index causing errors * Fix bug where sessions were not properly being deleted on logout * Moved session refresh outside of form content check --------- Co-authored-by: coyotte508 <coyotte508@gmail.com>45ec8d7
-
Feature/add OIDC optional tolerance and resource (#496)
itaybar +1: nsarrazin Unverified signature* Added optional tolerance for OIDC jwt * Added optional OIDC resource for authorizationURL * Refactored open id params with zod --------- Co-authored-by: Nathan Sarrazin <sarrazin.nathan@gmail.com>b881a02
-
feat openid login with google (#250)
Unverified signatureCo-authored-by: coyotte508 <coyotte508@gmail.com>018a142
-
🐛 Fix "signin with HF" within space + CSRF (#236)
Eliott CUnverified signatured72b096
-
Login flow (#193)
Adrien Denat +2: Eliott C., victor Unverified signature* replace EthicsModal by LoginModal and start binding auth logic * start implementing login modal + give a try to @auth/sveltekit using Github oauth as a test * start custom auth implementation instead of auth.js for consistency with moon-landing * fetch user data from provider * add migration from anonymous to user + bind frontend * add missing auth secret + only migrate conversations for pre-existing users * remove email scope as it's not needed Co-authored-by: Eliott C. <coyotte508@gmail.com> * no need to define .well-known path Co-authored-by: Eliott C. <coyotte508@gmail.com> * use env var for hf hub website url * move sessionId to signature on csrf token exchange * remove ethic modal check and set default settings on new users * anonymous users can read only + modal on write tries * refresh session cookie when existing user signin again rather than use the old one * allow users to keep using the app without loging-in if env var is not present * typo * handle deni…566c2fc
-
✨ Backend preparation for "Sign in with HF" (#190)
Eliott CUnverified signatured7b4e1d