Michael Mayer
1f51d9cfea
Auth: Add --remove flag to "photoprism passwd" command #782
...
see https://docs.photoprism.app/known-issues/#openid-connect-oidc
Signed-off-by: Michael Mayer <michael@photoprism.app >
2024-07-09 17:40:26 +02:00
Michael Mayer
1ee04c3017
Backend: Move unix package to /pkg/time/unix
...
Signed-off-by: Michael Mayer <michael@photoprism.app >
2024-07-03 09:31:27 +02:00
Michael Mayer
44b94d0f62
Backend: Move report package to /pkg/txt/report
...
Signed-off-by: Michael Mayer <michael@photoprism.app >
2024-07-03 09:29:15 +02:00
Michael Mayer
a97f8d0795
API: Implement OIDC redirect endpoint #782
...
Requires further testing and refinement before it can be released.
Signed-off-by: Michael Mayer <michael@photoprism.app >
2024-07-01 16:50:53 +02:00
Michael Mayer
9527082a03
Backups: Improved saving of photo and album YAML files #4243
...
Signed-off-by: Michael Mayer <michael@photoprism.app >
2024-05-14 08:45:18 +02:00
Michael Mayer
13255695e5
Albums: Remove photo from review when adding it to an album #4229
...
Signed-off-by: Michael Mayer <michael@photoprism.app >
2024-05-09 16:00:53 +02:00
Michael Mayer
153bb8e564
Auth: Extend session lifetime if 2FA is enabled #808 #3943 #4114
...
Signed-off-by: Michael Mayer <michael@photoprism.app >
2024-04-12 13:30:30 +02:00
Michael Mayer
b11491c9d6
Auth: Refactor grant, method, and provider types in pkg/authn #808 #4114
...
Signed-off-by: Michael Mayer <michael@photoprism.app >
2024-04-06 15:13:15 +02:00
Michael Mayer
fdc2062d33
Account: Refactor access token API and request forms #808 #4114
...
Signed-off-by: Michael Mayer <michael@photoprism.app >
2024-04-05 14:46:11 +02:00
Michael Mayer
2185618910
API: Refactor authentication failure rate limit #808 #3943
...
Signed-off-by: Michael Mayer <michael@photoprism.app >
2024-04-04 11:18:05 +02:00
Michael Mayer
37c3c9d624
Account: Add auth-related error messages to pkg/authn #808 #4114
...
Signed-off-by: Michael Mayer <michael@photoprism.app >
2024-03-29 12:16:26 +01:00
Michael Mayer
d0ad3c23fb
OAuth2: Remove client soft delete and fix client add command #213 #3943
...
Signed-off-by: Michael Mayer <michael@photoprism.app >
2024-01-29 21:08:01 +01:00
Michael Mayer
fd0006928e
OAuth2: Remove sessions when client is deleted or disabled #213 #3943
...
Signed-off-by: Michael Mayer <michael@photoprism.app >
2024-01-29 18:10:32 +01:00
Michael Mayer
fe7e342692
OAuth2: Improve authentication logs and commands #213 #3730 #3943
...
Signed-off-by: Michael Mayer <michael@photoprism.app >
2024-01-29 17:32:53 +01:00
Michael Mayer
305e7bac68
OAuth2: Refactor "client add" and "client mod" CLI commands #808 #3943
...
Signed-off-by: Michael Mayer <michael@photoprism.app >
2024-01-29 13:54:50 +01:00
Michael Mayer
06a18f5818
Auth: Add "access_token" authentication provider type #782 #808 #3943
...
Signed-off-by: Michael Mayer <michael@photoprism.app >
2024-01-19 14:41:08 +01:00
Michael Mayer
4ba32a7220
2FA: Add two-factor authentication key model and tests #782 #808 #3943
...
Signed-off-by: Michael Mayer <michael@photoprism.app >
2024-01-19 13:45:30 +01:00
Michael Mayer
7e7ba69982
Auth: Add client_uid and client_name to auth_sessions table #808 #3943
...
This also adds the ability to change the client role if needed and
improves the usage information and output of the CLI commands.
Signed-off-by: Michael Mayer <michael@photoprism.app >
2024-01-18 16:53:05 +01:00
Michael Mayer
e03dbe5d16
OAuth2: Refactor limit for number of access tokens / sessions #808 #3943
...
Signed-off-by: Michael Mayer <michael@photoprism.app >
2024-01-09 13:46:55 +01:00
Michael Mayer
ec13ccb6d5
OAuth2: Enforce limit for number of access tokens / sessions #808 #3943
...
These changes ensure that OAuth2 clients cannot create an unlimited
number of access tokens (sessions) with their client credentials.
Signed-off-by: Michael Mayer <michael@photoprism.app >
2024-01-08 16:57:07 +01:00
Michael Mayer
467f7b1585
OAuth2: Add Client Credentials Authentication #213 #782 #808 #3730 #3943
...
This adds standard OAuth2 client credentials and bearer token support as
well as scope-based authorization checks for REST API clients. Note that
this initial implementation should not be used in production and that
the access token limit has not been implemented yet.
Signed-off-by: Michael Mayer <michael@photoprism.app >
2023-12-12 18:42:50 +01:00
