Commit Graph

7 Commits

Author SHA1 Message Date
🐙PiperYxzzy
66c35e7e4a Adding admin creation, conf and other items
* Config now added, accessible via config.Config
* Admin can now be generated via a randomized URL if there are no admins
in the system
* Added a shared floor to login attempts to block enumeration attacks
2022-05-03 18:52:01 +02:00
🐙PiperYxzzy
6c567cd58c Verify and password reset
* Users can now request a password reset and reset with their token
2022-05-01 19:20:47 +02:00
🐙PiperYxzzy
0af09dcc01 Fix signup risk of enumeration to test emails
* Now, if a known email is used, it will still return the same result
* If a known email is used, we will ping the email address to know that
there was a signup attempt
2022-05-01 13:25:09 +02:00
🐙PiperYxzzy
dd8d2a677d Added better Tenanting
* Removed Tenanting from base objects as some models may be tenantless
* Admins are naturally not restricted by tenants
* Users *ARE* the tenants (for now) so they don't require a tenant ID
either
* User-owned models should all include the Tenanted model as their base
* Created .Create and .Save methods attached to base model
2022-05-01 12:48:40 +02:00
🐙PiperYxzzy
8ab45e2401 Login, JWT and auth overstructure
* Signup -> Login -> JWT-Doot flow now works for users
* Administrators cannot currently sign up for obvious reasons
* Segmented the main.go methods into a core controller package
2022-05-01 12:31:41 +02:00
🐙PiperYxzzy
6db02148ea Building and returning JWTs on login
* Created Util package for assorted items
* Currently generates an HMAC key on startup, to be changed
* JWT also includes login role
2022-04-30 16:30:07 +02:00
🐙PiperYxzzy
47ac0cdc07 Adding models, DB access, signup, login
* Created Base, Auth, User and Admin models
* Added skeleton API structure containing: User signup, User & Admin
login, authorized zones, ping tests
* Simple user signup functional
* Skeleton user login functional, no means to verify as of yet
* Added POSTMAN file
2022-04-30 16:02:26 +02:00