wdevs/ResolveSpec
5
0
Fork 0
mirror of https://github.com/bitechdev/ResolveSpec.git synced 2026-10-01 19:20:31 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity
503 Commits 4 Branches 306 Tags
d3a99550d9a7da444acd451c1aa839ed6ce426d8
Commit Graph
5 Commits
Author SHA1 Message Date
Hein 8a94d884e7 fix(security): verify passwords, bind row-security args, fail closed on panic 
Verify bcrypt passwords in Direct mode and the shipped procedures, hash on
register/reset, ignore client-supplied roles and level at registration and
drop the password from the jwt_login payload. Legacy cleartext upgrade is
opt-in. Row security templates now bind the user as a parameter, validate
identifiers, attach via common.SelectQuery and fail the request if the
filter cannot be attached. ApplyColumnSecurity and GetRowSecurityTemplate
convert panics to errors and the hooks fail closed. Update audit status.
 2026-09-30 13:44:59 +02:00
Hein 598fd687f6 feat(security): add GetUserRef method for opaque user identifiers
Tests / Integration Tests (push) Failing after 1s
Details
Tests / Unit Tests (push) Failing after 21s
Details
Build , Vet Test, and Lint / Build (push) Successful in 50s
Details
Build , Vet Test, and Lint / Run Vet Tests (1.23.x) (push) Successful in 54s
Details
Build , Vet Test, and Lint / Run Vet Tests (1.24.x) (push) Successful in 2m6s
Details
Build , Vet Test, and Lint / Lint Code (push) Successful in 2m21s
Details
2026-07-10 13:47:32 +02:00
Hein 0308644075 feat(auth): add authenticate callback for fallback logic 
* Implement SetAuthenticateCallback in authenticators
* Update Authenticate methods to use callback on failure
 2026-05-21 11:27:51 +02:00
Hein e5984f5205 feat(security): add cookie support for login and logout methods 
* Implement LoginWithCookie and LogoutWithCookie in stubAuthenticator, mockAuth, mockSecurityProvider, and MockAuthenticator
* Update tests to use cookie-based authentication
 2026-05-21 09:51:30 +02:00
Hein b2115038f2 Fixed providers 2025-12-09 11:18:11 +02:00