wdevs/ResolveSpec
5
0
Fork 0
mirror of https://github.com/bitechdev/ResolveSpec.git synced 2026-08-28 20:12:35 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity
458 Commits 3 Branches 276 Tags
dab4940ace9996c2384078e4bd338f0de7538e7b
Commit Graph
7 Commits
Author SHA1 Message Date
warkanum dab4940ace fix(security): DatabaseAuthenticator.RefreshToken surfaces rotated refresh token and expiry
Tests / Unit Tests (push) Failing after 13s
Details
Tests / Integration Tests (push) Failing after 27s
Details
Build , Vet Test, and Lint / Run Vet Tests (1.24.x) (push) Successful in 33s
Details
Build , Vet Test, and Lint / Run Vet Tests (1.23.x) (push) Successful in 35s
Details
Build , Vet Test, and Lint / Build (push) Successful in 35s
Details
Build , Vet Test, and Lint / Lint Code (push) Successful in 39s
Details 
RefreshToken() hardcoded LoginResponse{Token: userCtx.SessionID, ExpiresIn: 24h}
and silently discarded anything else resolvespec_refresh_token returned. An
implementation that issues its own independent, rotating refresh token (not
just reusing the session/access token as its own refresh token) has nowhere
else to put the new refresh token and real access-token expiry than
UserContext.Claims, since UserContext has no dedicated fields for either.

Now reads claims.refresh_token/claims.expires_in when present and surfaces
them into LoginResponse.RefreshToken/ExpiresIn. Implementations that don't
set these claims keep today's behavior unchanged (empty RefreshToken, 24h
ExpiresIn default) — purely additive, no breaking change.
 2026-08-27 21:51:16 +02:00
Hein e5984f5205 feat(security): add cookie support for login and logout methods 
* Implement LoginWithCookie and LogoutWithCookie in stubAuthenticator, mockAuth, mockSecurityProvider, and MockAuthenticator
* Update tests to use cookie-based authentication
 2026-05-21 09:51:30 +02:00
Hein 16a960d973 feat(db): add reconnect logic for database adapters 
* Implement reconnect functionality in GormAdapter and other database adapters.
* Introduce a DBFactory to handle reconnections.
* Update health check logic to skip reconnects for transient failures.
* Add tests for reconnect behavior in DatabaseAuthenticator.
 2026-04-10 11:18:39 +02:00
warkanum 0b8d11361c feat(auth): ✨ add user registration functionality 
* Implemented resolvespec_register stored procedure for user registration.
* Added RegisterRequest struct for registration data.
* Created Register method in DatabaseAuthenticator.
* Updated tests for successful registration and error handling for duplicate usernames and emails.
 2026-01-31 21:50:32 +02:00
Hein a95c28a0bf Multi Token warning and handling 2025-12-10 08:44:37 +02:00
Hein 0f05202438 Database Authenticator with cache 2025-12-09 11:32:44 +02:00
Hein b2115038f2 Fixed providers 2025-12-09 11:18:11 +02:00