34 Commits

Author SHA1 Message Date
Elian Doran
0f06bf43f0
Merge pull request #1708 from TriliumNext/fix_http-code-failed-login_#1707
fix(login): send back 401 Unauthorized on failed login attempt
2025-04-15 13:12:28 +03:00
Panagiotis Papadopoulos
ce83c918fb fix(login): fix regression that removed support for setting custom cookieMaxAge
regression introduced with #401
custom cookieMaxAge feature added with #1156

fixes #1709
2025-04-15 09:09:28 +02:00
Panagiotis Papadopoulos
fa350e13f6 fix(login): send back 401 Unauthorized on failed login attempt 2025-04-15 08:48:57 +02:00
JYC333
4b64c34cbb
Merge pull request #1595 from TriliumNext/fix/logout-headers-sent-error
Fix "Cannot set headers after they are sent" error in logout function
2025-04-02 11:44:19 +02:00
Nriver
30fb754a5f hotfix(auth): fix TOTP validation bypass issue 2025-04-02 14:29:37 +08:00
Nriver
dab65a6364 Fix "Cannot set headers after they are sent" error in logout function 2025-04-02 14:13:38 +08:00
Jin
aaecb43f8a fix: 🐛 fix oauth logout error 2025-03-28 04:05:00 +01:00
Jin
f2a29653b2 feat: 🎸 Fix SSO login 2025-03-26 02:39:29 +01:00
Jin
d4b657e4d8 feat: 🎸 Fix import naming 2025-03-26 02:04:24 +01:00
Jin
886e63f128 feat: 🎸 Add SSO login button 2025-03-26 01:48:42 +01:00
Jin
a30695b9fb feat: 🎸 Remove redundant check auth 2025-03-26 01:36:48 +01:00
Jin
083ee5d23b feat: 🎸 Fix TOTP not load correctly 2025-03-26 00:42:19 +01:00
Jin
8f157e04d4 feat: 🎸 Show correct login error to user 2025-03-26 00:13:56 +01:00
Jin
c1ed471403 feat: 🎸 Ask user to login if any MFA configs are changed 2025-03-26 00:04:55 +01:00
Jin
c2a6d517f0 feat: 🎸 Better naming for vars 2025-03-25 23:53:49 +01:00
Jin
8df1e3263b Merge branch 'develop' into feature/MFA 2025-03-22 12:35:00 +01:00
Panagiotis Papadopoulos
1a0c35f43d refactor(routes/login): use "shorter" syntax for passing to ejs render 2025-02-26 08:50:36 +01:00
Panagiotis Papadopoulos
0aa1d602a1 fix(routes/login): add missing "appPath" to ejs render 2025-02-26 08:45:35 +01:00
Panagiotis Papadopoulos
201663d9ec chore(prettier): fix prettier issues 2025-02-13 09:07:25 +01:00
Panagiotis Papadopoulos
38215c46ae feat(login): make use of default maxAge by sessionParser
cookie will use the default value set in sessionParser middleware, which is controlled by
config.Session.cookieMaxAge

if rememberMe is not set -> the value is unset and the cookie becomes a non-persistent cookie,
which the browser delete after the current session (e.g. when you close the browser)
2025-02-13 09:04:34 +01:00
Panagiotis Papadopoulos
e3b7ae018f refactor(routes/login): refactor login fn
I also got rid of the deprecated use of "expires" - setting maxAge to undefined is the preferred way
2025-02-11 07:55:18 +01:00
Panagiotis Papadopoulos
d1bd2d2812 refactor(routes/login): remove unused rendering of HTML 2025-01-12 13:13:59 +01:00
Elian Doran
324696bc54
refactor(ts): enable verbatim module syntax 2025-01-09 18:36:24 +02:00
Elian Doran
4cbb529fd4
chore(prettier): fix all files 2025-01-09 18:07:02 +02:00
Elian Doran
2eb4d4fb66
Merge remote-tracking branch 'origin/develop' into feature/MFA 2024-12-24 13:30:37 +02:00
Elian Doran
5190b28d3c
chore(types): adapt to new express type definitions 2024-12-10 22:35:23 +02:00
chesspro13
494721f38f
Changed Verification order. 2024-09-07 11:51:29 -07:00
chesspro13
e232c6634e
TOTP working 2024-09-07 11:41:54 -07:00
chesspro13
9c748f326a
Ported from branch OIDC 2024-09-07 10:21:41 -07:00
Elian Doran
212d61c1d2
server: Fix missing .js import for route-interface 2024-07-24 20:23:05 +03:00
Elian Doran
0ceae0a65e
server-esm: Change some more export object to export default object 2024-07-18 21:47:30 +03:00
Elian Doran
35d11cc0d2
server-esm: Change simple local import statements 2024-07-18 21:35:17 +03:00
Elian Doran
5fdf094e9d
server-ts: Convert etapi/notes 2024-04-07 16:56:45 +03:00
Elian Doran
7fe6d1ab4d
server-ts: Convert routes/login 2024-04-07 14:22:01 +03:00