Commit History
-
Enhance Dynamic User Attribute Handling in OIDC Integration (#885)
Chang Chi, Meng +2: nsarrazin, ‘XGungo’ Unverified signature* Refactor `updateUser` to Support Dynamic `nameClaim` Configuration * style: run Prettier to fix lint errors * Validate NAME_CLAIM in OIDConfig schema * Refactor userData parsing --------- Co-authored-by: Nathan Sarrazin <sarrazin.nathan@gmail.com> Co-authored-by: ‘XGungo’ <‘daniel2000890311g@gmail.com’>c6129c3
-
[JS] use shorthand notation (#711)
MishigUnverified signature* [JS] use shorthand notation * add `"object-shorthand": ["error", "always"],` * fix "Expected method shorthand object-shorthand" * formatd5559df
-
Use JSON5 for parsing all config vars (#671)
Unverified signaturef09c5f3
-
Session management improvements: Multi sessions, renew on login/logout (#603)
Unverified signature* wip: update sessionId on every login * comment out object.freeze * only refresh cookies on post * Add support for multiple sessions per user * fix tests * 🛂 Hash sessionId in DB * 🐛 do not forget about event.locals.sessionId * Update src/lib/server/auth.ts Co-authored-by: Eliott C. <coyotte508@gmail.com> * Add `expiresAt` field * remove index causing errors * Fix bug where sessions were not properly being deleted on logout * Moved session refresh outside of form content check --------- Co-authored-by: coyotte508 <coyotte508@gmail.com>e4a770a
-
Feature/add OIDC optional tolerance and resource (#496)
itaybar +1: nsarrazin Unverified signature* Added optional tolerance for OIDC jwt * Added optional OIDC resource for authorizationURL * Refactored open id params with zod --------- Co-authored-by: Nathan Sarrazin <sarrazin.nathan@gmail.com>e69cb4a
-
feat openid login with google (#250)
Unverified signatureCo-authored-by: coyotte508 <coyotte508@gmail.com>fa3b3b4
-
🐛 Fix "signin with HF" within space + CSRF (#236)
Eliott CUnverified signature767afa7
-
Login flow (#193)
Adrien Denat +2: Eliott C., victor Unverified signature* replace EthicsModal by LoginModal and start binding auth logic * start implementing login modal + give a try to @auth/sveltekit using Github oauth as a test * start custom auth implementation instead of auth.js for consistency with moon-landing * fetch user data from provider * add migration from anonymous to user + bind frontend * add missing auth secret + only migrate conversations for pre-existing users * remove email scope as it's not needed Co-authored-by: Eliott C. <coyotte508@gmail.com> * no need to define .well-known path Co-authored-by: Eliott C. <coyotte508@gmail.com> * use env var for hf hub website url * move sessionId to signature on csrf token exchange * remove ethic modal check and set default settings on new users * anonymous users can read only + modal on write tries * refresh session cookie when existing user signin again rather than use the old one * allow users to keep using the app without loging-in if env var is no…64d3841
-
✨ Backend preparation for "Sign in with HF" (#190)
Eliott CUnverified signature2e28042