Michael Mayer
023fbe3a1d
Pkg: Add service/cluster package & rename media/http → service/http #98
...
Signed-off-by: Michael Mayer <michael@photoprism.app >
2025-09-13 12:58:28 +02:00
Michael Mayer
6a89519e63
Videos: Refactor codec, content and file type specifications #4770
...
Signed-off-by: Michael Mayer <michael@photoprism.app >
2025-02-05 00:30:45 +01:00
Michael Mayer
1f4f65e988
Server: Add "force" and "mode" flags for sockets #4673 #4767 #4765 #4467
...
These changes allow you to force the re-creation of existing Unix domain
sockets and set the permissions of sockets after they have been created.
The flag or variable value for this must be formatted as follows:
--http-host="unix:/var/run/photoprism.sock?force=true&mode=660"
Signed-off-by: Michael Mayer <michael@photoprism.app >
2025-02-04 12:03:00 +01:00
Michael Mayer
fb186bf34d
Backend: Move session package to /internal/auth/session
...
Signed-off-by: Michael Mayer <michael@photoprism.app >
2024-07-02 08:11:17 +02:00
Michael Mayer
e5bbff4020
Backend: Move get package to /internal/photoprism/get
...
Signed-off-by: Michael Mayer <michael@photoprism.app >
2024-07-02 08:03:30 +02:00
Michael Mayer
a97f8d0795
API: Implement OIDC redirect endpoint #782
...
Requires further testing and refinement before it can be released.
Signed-off-by: Michael Mayer <michael@photoprism.app >
2024-07-01 16:50:53 +02:00
Michael Mayer
37c3c9d624
Account: Add auth-related error messages to pkg/authn #808 #4114
...
Signed-off-by: Michael Mayer <michael@photoprism.app >
2024-03-29 12:16:26 +01:00
Michael Mayer
1912cd54ca
Account: Add GET /api/v1/users/:uid/sessions endpoint #808 #4114
...
Signed-off-by: Michael Mayer <michael@photoprism.app >
2024-03-28 13:24:12 +01:00
Michael Mayer
4425becb3d
Auth: Implement 2FA setup and login in the web user interface #808 #3943
...
Signed-off-by: Michael Mayer <michael@photoprism.app >
2024-03-21 14:32:51 +01:00
Michael Mayer
7e7ba69982
Auth: Add client_uid and client_name to auth_sessions table #808 #3943
...
This also adds the ability to change the client role if needed and
improves the usage information and output of the CLI commands.
Signed-off-by: Michael Mayer <michael@photoprism.app >
2024-01-18 16:53:05 +01:00
Michael Mayer
2912ac9464
Security: Refactor cache headers, auth token validation & UI #782 #808
...
Signed-off-by: Michael Mayer <michael@photoprism.app >
2024-01-17 14:16:02 +01:00
Michael Mayer
3946e2a16f
API: Refactor "404 Not Found" response handler #3931
...
Signed-off-by: Michael Mayer <michael@photoprism.app >
2024-01-16 20:56:43 +01:00
Michael Mayer
c3b9b73d1d
API: Only allow CDNs to cache GET, HEAD, and OPTIONS requests #3931
...
Signed-off-by: Michael Mayer <michael@photoprism.app >
2024-01-16 16:17:16 +01:00
Michael Mayer
fed1d8ad95
Auth: Accept access token as passwd with fail rate limit #782 #808 #3943
...
Signed-off-by: Michael Mayer <michael@photoprism.app >
2024-01-14 18:28:17 +01:00
Michael Mayer
0e4d81853c
API: Add .well-known/oauth-authorization-server route handler #808 #3943
...
This commit also adds an /api/v1/oauth/logout endpoint that allows
clients to delete their sessions (access tokens) as needed.
Signed-off-by: Michael Mayer <michael@photoprism.app >
2024-01-08 14:53:39 +01:00
Michael Mayer
f8e0615cc8
Auth: Ensure backwards compatibility for existing API clients #808 #3943
...
These changes ensure that the new (SHA256) session ID is returned in the
"session_id" field, so that developers have time to update their client
implementations to use the new "access_token" field.
Signed-off-by: Michael Mayer <michael@photoprism.app >
2024-01-07 12:25:56 +01:00
Michael Mayer
0d2f8be522
Auth: Use hashed auth tokens for enhanced security #3943 #808 #782
...
Signed-off-by: Michael Mayer <michael@photoprism.app >
2024-01-06 17:35:19 +01:00
Michael Mayer
8df444dfd7
Auth: Refactor session API #98
...
Signed-off-by: Michael Mayer <michael@photoprism.app >
2023-03-10 12:15:10 +01:00
