denozord/auth-portal
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 14 Wiki Activity
108 Commits 3 Branches 14 Tags
main
Commit Graph
19 Commits
Author SHA1 Message Date
Denozordec 1a68597d48 perf: prepared statements, CSP, digest pin, вырезание design-preview, нагрузочные бюджеты, jsdom-тесты web, composite CI, SBOM/Trivy 2026-10-23 17:22:23 +07:00
Denozordec 08be310e6b fix(api): CORS через isReturnToAllowed, мягкая проверка JWT_SECRET, 404 для /assets, better-sqlite3 в api, healthcheck на /ready 2026-10-23 17:13:16 +07:00
Denozordec 5cbf4d29d7 ci: покрытие и пороги, тесты shared/api, smoke образа и бюджеты, документация 2026-10-23 17:08:36 +07:00
Denozordec 22dd6f9937 fix(api): защита секретов в production, redact логов, bootstrap без полного скана users 2026-10-23 17:03:45 +07:00
Denozordec 8cba7a5c41 feat(db): онлайн-бэкап SQLite, CLI backup, ротация и восстановление 2026-10-23 17:02:50 +07:00
Denozordec 30d331c633 perf(api): кэш профиля и конфигурации, лимитер argon2, SHA-256 для client secret, trust proxy 2026-10-23 16:54:05 +07:00
DenozordecandClaude Sonnet 5.5 107eddba9e perf(db): pragma, транзакции, индексы, версия схемы, SQL-фильтры и очистка 
Co-Authored-By: Claude Sonnet 5.5 <[email protected]>
 2026-10-23 15:56:25 +07:00
DenozordecandClaude Sonnet 5.5 140ffdb7b1 fix(api): graceful shutdown, единый обработчик ошибок и корректные 404 
Co-Authored-By: Claude Sonnet 5.5 <[email protected]>
 2026-10-23 15:53:18 +07:00
Denozordec 3cef8c33c2 build(monorepo): catalog, typecheck/lint задачи, унификация версий 
- pnpm catalog: один typescript 6.0.3 и vitest 4.1.10 на весь монорепо
- задача turbo typecheck; tsc вынесен из build web (блокировал vite build)
- eslint-конфиги для api/db/shared (бэкенд не линтился)
- turbo test больше не зависит от ^build (тесты идут по исходникам)
- react-day-picker перенесён из web в ui (потребитель calendar.tsx)
- из web удалены неиспользуемые motion/@dnd-kit×4/react-virtual/date-fns
 2026-09-23 14:51:38 +07:00
Denozordec 87f35631b4 perf(api): горячие пути OIDC и батч-запросы 
- кэш importJWK: не импортировать RSA-ключ на каждый /oauth/userinfo
- Cache-Control для /.well-known/openid-configuration и jwks.json
- индекс refresh_sessions(token_hash) — было full scan на каждом authorize/logout
- GET /admin/users: 3 SELECT на пользователя → батч-запросы (N+1)
- revokeAllSessionsForUser: цикл UPDATE → один UPDATE
- preCompressed статики (файлы готовит Dockerfile)
 2026-09-23 14:51:14 +07:00
DenozordecandCursor 46dc2f714c feat(auth): добавить вход по passkey
quality / commitlint (push) Skipped
Details
quality / changes (push) Successful in 8s
Details
quality / docker-check (push) Skipped
Details
quality / web (push) Successful in 1m11s
Details
quality / api (push) Successful in 47s
Details
CD / quality (push) Successful in 2m10s
Details
CD / publish (push) Successful in 1m50s
Details 
Альтернатива паролю на портале; SSO приложений без изменений.

Co-authored-by: Cursor <[email protected]>
 2026-08-19 10:24:46 +07:00
DenozordecandCursor f76b89c1df ci: перевести пайплайн на quality bake и alpine
quality / commitlint (push) Skipped
Details
quality / changes (push) Successful in 7s
Details
quality / docker-check (push) Skipped
Details
quality / web (push) Successful in 1m7s
Details
quality / api (push) Successful in 44s
Details
CD / quality (push) Successful in 2m3s
Details
CD / publish (push) Successful in 3m31s
Details 
Co-authored-by: Cursor <[email protected]>
 2026-08-19 01:30:57 +07:00
DenozordecandCursor 0b6fa65b08 feat(reui): update ReUI components and documentation
Build and Push Auth Portal Docker Image / build-and-push (push) Successful in 2m30s
Details
Build and Push Auth Portal Docker Image / create-release (push) Skipped
Details 
- Added new OIDC configuration options in `.env.example`.
- Expanded documentation in `AGENTS.md` to include OIDC endpoints and admin UI.
- Updated ReUI skill version and component count from 17 to 20 across various documentation files.
- Enhanced `README.md` and other related files to reflect the new component structure and usage guidelines.

Co-authored-by: Cursor <[email protected]>
 2026-08-11 16:58:47 +07:00
DenozordecandCursor cc38bf06f8 feat(admin): журналы входов и изменений с IP/UA и сессиями
Build and Push Auth Portal Docker Image / build-and-push (push) Successful in 1m57s
Details
Build and Push Auth Portal Docker Image / create-release (push) Skipped
Details 
Разделены экраны «Входы» и «Изменения»; логин пишет IP/UA и last_login_ip;
SSO handoff и revoke refresh-сессий; улучшены audit-карточки.

Co-authored-by: Cursor <[email protected]>
 2026-07-31 03:12:39 +07:00
DenozordecandCursor 8b1203f5e9 fix(db): индексы audit source_app/event_id только после ALTER
Build and Push Auth Portal Docker Image / build-and-push (push) Successful in 1m59s
Details
Build and Push Auth Portal Docker Image / create-release (push) Skipped
Details 
На существующей audit_log CREATE INDEX по source_app падал до добавления колонки — контейнер crash-loop / Traefik 404.

Co-authored-by: Cursor <[email protected]>
 2026-07-21 13:36:10 +07:00
DenozordecandCursor 57e34ff5e9 feat(admin): ingest аудита из apps и users 1:1 с Sheet журнала
Build and Push Auth Portal Docker Image / build-and-push (push) Successful in 1m46s
Details
Build and Push Auth Portal Docker Image / create-release (push) Skipped
Details 
Добавлен POST /api/v1/ingest/audit, фильтры source_app/user_id, last_login_at; таблица пользователей по solution-users-1 с журналом в Sheet.

Co-authored-by: Cursor <[email protected]>
 2026-07-21 13:24:28 +07:00
DenozordecandCursor 26fc8253c3 feat(admin): журнал аудита с ротацией и апгрейд таблицы пользователей
Build and Push Auth Portal Docker Image / build-and-push (push) Successful in 1m37s
Details
Build and Push Auth Portal Docker Image / create-release (push) Skipped
Details 
Добавлен audit log (solution-users-6) с retention N дней и hourly purge; таблица пользователей приведена к DNA solution-users-1 (Filters, avatar, sorting).

Co-authored-by: Cursor <[email protected]>
 2026-07-21 04:20:47 +07:00
DenozordecandCursor 0fa4b7adea feat(app-switcher): централизовать ссылки приложений в portal settings
Build and Push Auth Portal Docker Image / build-and-push (push) Successful in 1m49s
Details
Build and Push Auth Portal Docker Image / create-release (push) Skipped
Details 
Публичный GET и admin PUT/UI /admin/apps; каталог и chrome читают URL из store.

Co-authored-by: Cursor <[email protected]>
 2026-07-18 20:59:01 +07:00
Denozordec bac95bdb2e First Commit
Build and Push Auth Portal Docker Image / build-and-push (push) Successful in 5m26s
Details
Build and Push Auth Portal Docker Image / create-release (push) Skipped
Details
2026-07-18 13:27:37 +07:00