Commit Graph

22 Commits

Author SHA1 Message Date
Michael Mayer
6a89519e63 Videos: Refactor codec, content and file type specifications #4770
Signed-off-by: Michael Mayer <michael@photoprism.app>
2025-02-05 00:30:45 +01:00
Michael Mayer
1f4f65e988 Server: Add "force" and "mode" flags for sockets #4673 #4767 #4765 #4467
These changes allow you to force the re-creation of existing Unix domain
sockets and set the permissions of sockets after they have been created.

The flag or variable value for this must be formatted as follows:
--http-host="unix:/var/run/photoprism.sock?force=true&mode=660"

Signed-off-by: Michael Mayer <michael@photoprism.app>
2025-02-04 12:03:00 +01:00
Michael Mayer
0ada8d1095 API: Add additional fields to label and subject edit forms #383 #3168
Signed-off-by: Michael Mayer <michael@photoprism.app>
2025-01-17 02:55:07 +01:00
Michael Mayer
428d57e71e API: Add Swagger annotations #2132
Signed-off-by: Michael Mayer <michael@photoprism.app>
2024-07-16 12:05:55 +02:00
Michael Mayer
fe54cc7ef3 Auth: Fix 2-Factor Authentication (2FA) prompt on the login page #782
Signed-off-by: Michael Mayer <michael@photoprism.app>
2024-07-08 15:50:02 +02:00
Michael Mayer
e5bbff4020 Backend: Move get package to /internal/photoprism/get
Signed-off-by: Michael Mayer <michael@photoprism.app>
2024-07-02 08:03:30 +02:00
Michael Mayer
153bb8e564 Auth: Extend session lifetime if 2FA is enabled #808 #3943 #4114
Signed-off-by: Michael Mayer <michael@photoprism.app>
2024-04-12 13:30:30 +02:00
Michael Mayer
d869731bc7 Account: Allow to View and Delete App Passwords from the UI #808 #4114
Signed-off-by: Michael Mayer <michael@photoprism.app>
2024-04-10 06:58:57 +02:00
Michael Mayer
33fac8f404 API: Implement creation and revocation of app passwords #808 #4114
Note that these changes are not production ready yet and must be tested
well before releasing them.

Signed-off-by: Michael Mayer <michael@photoprism.app>
2024-04-07 16:44:30 +02:00
Michael Mayer
fdc2062d33 Account: Refactor access token API and request forms #808 #4114
Signed-off-by: Michael Mayer <michael@photoprism.app>
2024-04-05 14:46:11 +02:00
Michael Mayer
31d1f06ffa Security: Refactor rate limits for failed authentication request #808
Signed-off-by: Michael Mayer <michael@photoprism.app>
2024-03-31 14:45:17 +02:00
Michael Mayer
2787abbed8 Account: Revert status code change in api/session_create.go #808
Signed-off-by: Michael Mayer <michael@photoprism.app>
2024-03-29 10:43:11 +01:00
Michael Mayer
dae53efdd1 Account: Always return error 403 if login fails #808
Signed-off-by: Michael Mayer <michael@photoprism.app>
2024-03-28 15:24:10 +01:00
Michael Mayer
4425becb3d Auth: Implement 2FA setup and login in the web user interface #808 #3943
Signed-off-by: Michael Mayer <michael@photoprism.app>
2024-03-21 14:32:51 +01:00
Michael Mayer
2912ac9464 Security: Refactor cache headers, auth token validation & UI #782 #808
Signed-off-by: Michael Mayer <michael@photoprism.app>
2024-01-17 14:16:02 +01:00
Michael Mayer
3946e2a16f API: Refactor "404 Not Found" response handler #3931
Signed-off-by: Michael Mayer <michael@photoprism.app>
2024-01-16 20:56:43 +01:00
Michael Mayer
c3b9b73d1d API: Only allow CDNs to cache GET, HEAD, and OPTIONS requests #3931
Signed-off-by: Michael Mayer <michael@photoprism.app>
2024-01-16 16:17:16 +01:00
Michael Mayer
02a1b12edb Config: Update CORS header defaults and add /api/v1/echo endpoint #3931
Signed-off-by: Michael Mayer <michael@photoprism.app>
2024-01-16 14:36:08 +01:00
Michael Mayer
fed1d8ad95 Auth: Accept access token as passwd with fail rate limit #782 #808 #3943
Signed-off-by: Michael Mayer <michael@photoprism.app>
2024-01-14 18:28:17 +01:00
Michael Mayer
f8e0615cc8 Auth: Ensure backwards compatibility for existing API clients #808 #3943
These changes ensure that the new (SHA256) session ID is returned in the
"session_id" field, so that developers have time to update their client
implementations to use the new "access_token" field.

Signed-off-by: Michael Mayer <michael@photoprism.app>
2024-01-07 12:25:56 +01:00
Michael Mayer
0d2f8be522 Auth: Use hashed auth tokens for enhanced security #3943 #808 #782
Signed-off-by: Michael Mayer <michael@photoprism.app>
2024-01-06 17:35:19 +01:00
Michael Mayer
8df444dfd7 Auth: Refactor session API #98
Signed-off-by: Michael Mayer <michael@photoprism.app>
2023-03-10 12:15:10 +01:00