Commit Graph

209 Commits

Author SHA1 Message Date
Torsten Schulz (local)
2800ac84fb Temporarily disable Passkey section in profil.vue for consistency with recent changes. This update comments out the Passkey management UI elements, aligning with the ongoing review of Passkey functionality across the application.
Some checks failed
Code Analysis (JS/Vue) / analyze (push) Failing after 49s
2026-01-09 08:43:31 +01:00
Torsten Schulz (local)
d12380ee72 Temporarily disable Passkey functionality in login and registration components
Some checks failed
Code Analysis (JS/Vue) / analyze (push) Failing after 48s
Remove Passkey login and registration features from login.vue and registrieren.vue, including associated debug logs and UI elements. This change aims to streamline the user experience by focusing on standard login methods while Passkey support is under review. Additionally, disable Passkey management in profil.vue to ensure consistency across the application.
2026-01-09 08:40:28 +01:00
Torsten Schulz (local)
49a8d78b4f Refine Passkey registration logging and API options for local authenticators
Some checks failed
Code Analysis (JS/Vue) / analyze (push) Failing after 43s
Update the registrieren.vue component to enhance debug logging for local authenticator usage, providing clearer messages about the expected behavior during registration. Modify the register-passkey-options API to specify the use of local authenticators, ensuring better clarity on the authenticator selection process. This update aims to improve user understanding and troubleshooting during Passkey registration without the need for Cross-Device functionality.
2026-01-09 08:30:40 +01:00
Torsten Schulz (local)
1ef5f7cc07 Enhance Cross-Device registration debugging and API options
Some checks failed
Code Analysis (JS/Vue) / analyze (push) Failing after 47s
Update the registrieren.vue component to improve debug logging for Cross-Device registration, including checks for local authenticators and tunnel server connections. Add warnings for potential issues when Cross-Device is not used. Modify the register-passkey-options API to ensure compatibility with Cross-Device requirements by allowing both platform and cross-platform authenticators. This update aims to provide clearer insights and troubleshooting guidance during the Passkey registration process.
2026-01-09 08:10:13 +01:00
Torsten Schulz (local)
ea4c86f6b4 Enhance Cross-Device support and documentation for Passkey Registration
Some checks failed
Code Analysis (JS/Vue) / analyze (push) Failing after 53s
Update the CROSS_DEVICE_PROBLEM_ZUSAMMENFASSUNG.md to clarify the role of tunnel servers in the Cross-Device authentication process and outline troubleshooting steps. Additionally, enhance the registrieren.vue component with detailed information about the FIDO Cross-Device flow, including QR-Code format, connection requirements, and potential issues. Improve the register-passkey-options API documentation to reflect the use of tunnel servers, ensuring better understanding and support for Cross-Device functionality.
2026-01-09 08:04:50 +01:00
Torsten Schulz (local)
04e4d2385d Enhance debug information for Passkey Registration in registrieren.vue
Some checks failed
Code Analysis (JS/Vue) / analyze (push) Failing after 52s
Update the registrieren.vue component to include additional debug information for the Passkey registration process. Introduce new elements for displaying the smartphone URL, registration ID, and full options JSON, improving the clarity of debug outputs. Implement a copy-to-clipboard functionality for easier access to debug data, enhancing the overall user experience during Cross-Device registration.
2026-01-09 07:38:11 +01:00
Torsten Schulz (local)
e1c555e99f Enhance logging for mobile requests in log-requests middleware
Some checks failed
Code Analysis (JS/Vue) / analyze (push) Failing after 44s
Add functionality to log all requests from mobile devices, improving debugging capabilities. Extend the existing passkey endpoint checks to include a new endpoint for cross-device registration. This update aims to provide clearer insights into mobile user interactions with the application.
2026-01-08 23:42:16 +01:00
Torsten Schulz (local)
e0c41b76c3 Enhance debug logging for Passkey Registration requests
Some checks failed
Code Analysis (JS/Vue) / analyze (push) Failing after 51s
Improve logging in the register-passkey-options and log-requests middleware to provide detailed insights into request handling. Add user-agent analysis, IP address logging, and mobile/desktop detection to aid in troubleshooting. This update aims to enhance the clarity of request logs and support better debugging during the Passkey registration process.
2026-01-08 23:33:04 +01:00
Torsten Schulz (local)
eae2889f37 Update deployment script to ensure PM2 processes start with updated environment variables. This change improves the reliability of the process startup by incorporating the --update-env flag, enhancing deployment robustness.
Some checks failed
Code Analysis (JS/Vue) / analyze (push) Failing after 52s
2026-01-08 23:28:25 +01:00
Torsten Schulz (local)
29ef644581 Enhance debug logging and Cross-Device support for Passkey Registration
Some checks failed
Code Analysis (JS/Vue) / analyze (push) Failing after 45s
Update the registrieren.vue component to include detailed debug statements for the Cross-Device authentication flow, specifically during QR-Code generation. Improve logging in the register-passkey-options and register-passkey APIs to capture request details such as user agent and IP address, aiding in troubleshooting. Additionally, introduce a new function to retrieve pre-registration data, enhancing the overall registration process and compliance with Cross-Device requirements.
2026-01-08 23:27:11 +01:00
Torsten Schulz (local)
badf91afef Update Passkey Registration to comply with @simplewebauthn/browser v13+ API
Some checks failed
Code Analysis (JS/Vue) / analyze (push) Failing after 49s
Refactor the Passkey registration logic in multiple components to utilize the new API structure requiring { optionsJSON: options }. Enhance debug logging to validate options, including checks for user ID format and challenge type. This update aims to improve compliance with the latest library requirements and provide better insights during the registration process.
2026-01-08 17:10:13 +01:00
Torsten Schulz (local)
73ae8599c3 Refactor Passkey Registration to utilize native WebAuthn API
Some checks failed
Code Analysis (JS/Vue) / analyze (push) Failing after 44s
Update the test-smartphone.html to replace the use of @simplewebauthn/browser with the native WebAuthn API for Passkey registration. Enhance user feedback with additional messages regarding the use of the native API and improve the handling of user ID formats. Include detailed logging of credential creation options and ensure proper serialization of credential data for better debugging and compliance.
2026-01-08 16:11:30 +01:00
Torsten Schulz (local)
04f38cda69 Enhance debug logging and validation in Passkey Registration API
Some checks failed
Code Analysis (JS/Vue) / analyze (push) Failing after 54s
Add additional debug statements to the register-passkey-options API to validate the options structure, including checks for challenge type and user ID format. Improve logging to capture detailed information about the options being returned, aiding in troubleshooting and ensuring compliance with Cross-Device requirements.
2026-01-08 15:57:19 +01:00
Torsten Schulz (local)
6535abf074 Enhance debug logging for Passkey Registration options
Some checks failed
Code Analysis (JS/Vue) / analyze (push) Failing after 44s
Add detailed debug statements in the registrieren.vue component to validate the complete options structure during Passkey registration. Update the register-passkey API to simplify the options return process, eliminating unnecessary serialization while maintaining comprehensive logging of the options details for improved troubleshooting.
2026-01-08 14:17:18 +01:00
Torsten Schulz (local)
a763c959ef Enhance debug logging and validation for Passkey Registration
Some checks failed
Code Analysis (JS/Vue) / analyze (push) Failing after 51s
Add comprehensive debug statements in the registrieren.vue component to validate the options structure and ensure the challenge format is correct before initiating registration. Update the register-passkey API to log additional request details, including client IP and user-agent analysis, to improve troubleshooting and provide better insights during the registration process.
2026-01-08 12:12:15 +01:00
Torsten Schulz (local)
750c05eac1 Enhance debug logging for Cross-Device Passkey Registration
Some checks failed
Code Analysis (JS/Vue) / analyze (push) Failing after 50s
Add detailed debug statements in the registrieren.vue component to provide insights into the QR-Code generation process and the Cross-Device authentication flow. Additionally, update the register-passkey API to log request details, including user agent and method, to improve troubleshooting capabilities and ensure clarity during the registration process.
2026-01-08 11:56:57 +01:00
Torsten Schulz (local)
0deddeca51 Enhance deployment script with PM2 process checks and error handling
Some checks failed
Code Analysis (JS/Vue) / analyze (push) Failing after 49s
Update deploy-production.sh to include checks for PM2 installation and process existence before restarting. Implement error messages for failed starts and restarts, improving robustness and user guidance during deployment. Additionally, add useful commands for managing the PM2 process post-deployment.
2026-01-08 11:24:38 +01:00
Torsten Schulz (local)
34968742f0 Add CORS testing documentation and HTML test page for Passkey Cross-Device Authentication
Some checks failed
Code Analysis (JS/Vue) / analyze (push) Failing after 55s
Introduce a comprehensive CORS testing guide in CORS_TEST_ANLEITUNG.md, detailing steps for testing OPTIONS and POST requests, along with expected responses. Additionally, add a new HTML test page (test-cors.html) to facilitate interactive testing of CORS headers and responses for the Passkey registration API. Update the server API to ensure proper CORS headers are set for Cross-Device Authentication, enhancing the overall testing and debugging process.
2026-01-08 11:14:22 +01:00
Torsten Schulz (local)
010e89212f Improve deployment script with enhanced build validation and error handling
Some checks failed
Code Analysis (JS/Vue) / analyze (push) Failing after 47s
Update deploy-production.sh to include checks for missing dependencies, capture build output, and validate the presence of critical files and directories. This enhancement aims to provide clearer feedback during the build process and ensure a more robust deployment experience.
2026-01-08 09:14:17 +01:00
Torsten Schulz (local)
8fa8c8b5d9 Enhance deployment script and registration components with improved error handling and debug logging
Some checks failed
Code Analysis (JS/Vue) / analyze (push) Failing after 55s
Update deploy-production.sh to include comprehensive build validation checks, ensuring critical files and directories are present before proceeding. Enhance the registrieren.vue component to conditionally display the window origin and improve debug logging for the registration process. Additionally, add debug information in the register-passkey-options API to capture request details, including environment and process ID, for better troubleshooting capabilities.
2026-01-08 08:59:57 +01:00
Torsten Schulz (local)
f05d47be4c Enhance deployment script with build validation checks
Some checks failed
Code Analysis (JS/Vue) / analyze (push) Failing after 49s
Add checks to verify the success of the build process in deploy-production.sh. Implement error messages for missing critical files and directories, improving error handling and providing clear feedback during deployment. This update aims to ensure a successful build before proceeding with production data restoration.
2026-01-08 07:47:27 +01:00
Torsten Schulz (local)
f1cf06ca48 Add debug information display for component loading in registration page
Some checks failed
Code Analysis (JS/Vue) / analyze (push) Failing after 49s
Introduce a visible debug section in the registrieren.vue component to confirm the loading status and the definition of the handleFormSubmit method. This addition aims to enhance visibility during development and assist in troubleshooting component behavior.
2026-01-07 22:37:46 +01:00
Torsten Schulz (local)
62115ff1d1 Add debug logging for component lifecycle in registration page
Some checks failed
Code Analysis (JS/Vue) / analyze (push) Failing after 44s
Introduce console log statements to track the loading and setup phases of the registrieren.vue component. This enhancement aims to improve visibility into the component's lifecycle, aiding in debugging and troubleshooting during development.
2026-01-07 22:34:03 +01:00
Torsten Schulz (local)
8e398778ce Refactor form submission handling and enhance debug logging for registration process
Some checks failed
Code Analysis (JS/Vue) / analyze (push) Failing after 45s
Update the form submission method to a unified handler, improving code clarity and maintainability. Add detailed debug logging to track form submission events and registration method calls, aiding in troubleshooting and providing better insights during the registration process.
2026-01-07 22:24:18 +01:00
Torsten Schulz (local)
c1e93f8989 Add debug information display for passkey registration process
Some checks failed
Code Analysis (JS/Vue) / analyze (push) Failing after 49s
Introduce a debug information section in the passkey registration flow, providing insights into the challenge, RP-ID, and origin when debugging is enabled. Enhance logging to capture detailed options and cross-device authentication information, improving troubleshooting capabilities and user guidance during the registration process.
2026-01-07 22:13:50 +01:00
Torsten Schulz (local)
a16838ff47 Enhance debug logging and validation in passkey registration process
Some checks failed
Code Analysis (JS/Vue) / analyze (push) Failing after 50s
Add detailed debug logging to track the verification parameters and errors during the passkey registration flow. Implement validation to ensure the expected origin does not include port 3100, improving error handling and providing clear guidance for configuration issues. This update aims to enhance troubleshooting and the overall robustness of the registration process.
2026-01-07 22:05:24 +01:00
Torsten Schulz (local)
994aabfb85 Enhance WebAuthn origin handling and debug logging for passkey registration
Some checks failed
Code Analysis (JS/Vue) / analyze (push) Failing after 48s
Refine the WebAuthn configuration to ensure that HTTPS origins do not include ports, improving compliance with standards. Add additional debug logging in the passkey registration process to verify the webauthnOrigin and provide guidance for configuration issues, aiding in troubleshooting and enhancing the clarity of the registration flow.
2026-01-07 22:01:28 +01:00
Torsten Schulz (local)
83a2166399 Refine WebAuthn configuration and enhance debug logging for origin verification
Some checks failed
Code Analysis (JS/Vue) / analyze (push) Failing after 45s
Update the WebAuthn configuration to ensure HTTPS origins do not include ports, improving compliance with standards. Add detailed debug logging in the passkey registration process to verify the actual origin from the client response, aiding in troubleshooting and enhancing the clarity of the registration flow.
2026-01-07 21:54:02 +01:00
Torsten Schulz (local)
c40780ef89 Enhance passkey registration process with detailed debug logging and validation checks
Some checks failed
Code Analysis (JS/Vue) / analyze (push) Failing after 48s
Add comprehensive debug logging throughout the passkey registration flow, including request handling, option generation, and verification steps. Implement validation for incoming requests and responses to ensure required fields are present, improving error handling and clarity. This update aims to facilitate troubleshooting and enhance the overall robustness of the registration process.
2026-01-07 21:36:41 +01:00
Torsten Schulz (local)
bb985ddc8f Improve passkey registration error handling and options serialization
Some checks failed
Code Analysis (JS/Vue) / analyze (push) Failing after 44s
Enhance the registration process by adding error handling for the WebAuthn startRegistration method and ensuring the presence of required options. Include debug logging for received options and serialize the options correctly before returning them in the API response, improving robustness and clarity in the registration flow.
2026-01-07 21:30:13 +01:00
Torsten Schulz (local)
b34a6fc155 Enhance passkey registration handling with error checks and CORS support
Some checks failed
Code Analysis (JS/Vue) / analyze (push) Failing after 49s
Add validation for server response in the registration process, ensuring the presence of necessary options. Implement CORS headers for cross-device authentication and increase the timeout for registration to 5 minutes. Include debug logging for options structure to aid in troubleshooting.
2026-01-07 21:24:11 +01:00
Torsten Schulz (local)
e7e9d7815c Refactor CORS header handling in authentication endpoints
Some checks failed
Code Analysis (JS/Vue) / analyze (push) Failing after 50s
Update the CORS header variable name from 'origin' to 'requestOrigin' in both login and registration API endpoints for improved clarity and consistency. This change enhances the readability of the code while maintaining support for cross-device authentication.
2026-01-07 21:02:58 +01:00
Torsten Schulz (local)
ad21534862 Add CORS support for Cross-Device Authentication in passkey handling
Some checks failed
Code Analysis (JS/Vue) / analyze (push) Failing after 45s
Enhance authentication options in the server API by adding CORS headers to support cross-device authentication. Implement handling for preflight OPTIONS requests and increase timeout for registration and authentication processes to 5 minutes, improving user experience and compatibility across devices.
2026-01-07 20:59:48 +01:00
Torsten Schulz (local)
3d9b6b57dc Refactor authentication handling in Navigation and registration components to support lazy store access, improving resilience against Pinia initialization issues. Enhance registration logic to include optional password fallback for passkey users, with validation checks for password strength and confirmation. Update server-side registration to handle optional password securely, ensuring consistent user experience across different authentication methods.
Some checks failed
Code Analysis (JS/Vue) / analyze (push) Failing after 49s
2026-01-07 20:16:17 +01:00
Torsten Schulz (local)
4c7ae87c70 Remove deprecated data files including configuration, gallery metadata, members, news, sessions, users, and membership applications to streamline the server data structure and improve maintainability.
Some checks failed
Code Analysis (JS/Vue) / analyze (push) Has been cancelled
2026-01-07 20:16:03 +01:00
Torsten Schulz (local)
8bdebf6a73 Implement passkey support checks in registration page, including user feedback for unsupported scenarios. Update logic to determine passkey availability based on secure context and browser compatibility, enhancing user experience during registration.
Some checks failed
Code Analysis (JS/Vue) / analyze (push) Failing after 50s
2026-01-07 18:46:45 +01:00
Torsten Schulz (local)
fde25d92c5 Implement passkey recovery feature, including email link requests and registration options. Update login and registration pages to support passkey authentication, with UI enhancements for user experience. Add server-side handling for passkey registration and login, including account activation checks. Update environment configuration for passkey recovery TTL settings.
Some checks failed
Code Analysis (JS/Vue) / analyze (push) Failing after 48s
2026-01-07 18:37:01 +01:00
Torsten Schulz (local)
a8423f9c39 Enhance deployment script to conditionally symlink data directories based on git tracking status, improving error handling for uncommitted changes. Implement cleanup of untracked files while preserving essential directories, ensuring a smoother deployment process.
Some checks failed
Code Analysis (JS/Vue) / analyze (push) Failing after 42s
2026-01-07 18:08:07 +01:00
Torsten Schulz (local)
946e5fadb0 Refactor deployment script to handle symlinking of public data conditionally based on git tracking status, improving error handling for uncommitted changes. Update PM2 configuration to directly start the Node server for Nuxt 4 production builds in both harheimertc.config.cjs and harheimertc.simple.cjs. Modify user ID handling in registration options to use Uint8Array for compatibility with @simplewebauthn/server.
Some checks failed
Code Analysis (JS/Vue) / analyze (push) Failing after 43s
2026-01-07 18:06:09 +01:00
Torsten Schulz (local)
4864c80da3 Update package-lock.json to remove deprecated @peculiar/x509 version and add a new dependency entry for @simplewebauthn/server. Modify package.json to include an override for @peculiar/x509 version 1.13.0, ensuring compatibility across the project.
Some checks failed
Code Analysis (JS/Vue) / analyze (push) Failing after 44s
2026-01-07 17:58:38 +01:00
Torsten Schulz (local)
9bae707473 Refactor deployment script to improve data management by introducing configurable backup and restore paths, enhancing error handling, and ensuring persistent data storage. Update backup processes to create timestamped directories for better organization.
Some checks failed
Code Analysis (JS/Vue) / analyze (push) Failing after 49s
2026-01-07 17:54:49 +01:00
Torsten Schulz (local)
225e930e4c Update deployment script to ensure persistent data management, enhance backup and restore processes, and improve error handling. Modify .gitignore to exclude sensitive production data and update deployment documentation to reflect changes. Add environment variable loading for production secrets in configuration files.
Some checks failed
Code Analysis (JS/Vue) / analyze (push) Failing after 48s
2026-01-07 17:42:04 +01:00
Torsten Schulz (local)
371fef25d7 Refactor authentication middleware to remove dependency on Pinia, implementing direct API calls for authentication status checks. Update member API documentation to escape JWT token placeholder for clarity. Update session and user data formats for improved security and consistency.
Some checks failed
Code Analysis (JS/Vue) / analyze (push) Failing after 53s
2026-01-07 17:26:22 +01:00
Torsten Schulz (local)
673c34ac9d Update Apache SSL configuration and enhance security features across multiple files. Changed X-Frame-Options to SAMEORIGIN for better security, added optional Content Security Policy headers for testing, and improved password handling with HaveIBeenPwned checks during user registration and password reset. Implemented passkey login functionality in the authentication flow, including UI updates for user experience. Enhanced image upload processing with size limits and validation, and added rate limiting for various API endpoints to prevent abuse.
Some checks failed
Code Analysis (JS/Vue) / analyze (push) Failing after 51s
2026-01-05 11:50:57 +01:00
Torsten Schulz (local)
8bd7ed76cd Remove gitleaks binary and archive files, and update .gitignore to exclude security tooling artifacts, enhancing project cleanliness and security management.
All checks were successful
Code Analysis (JS/Vue) / analyze (push) Successful in 3m49s
2025-12-20 16:01:40 +01:00
Torsten Schulz (local)
0afdfec33b Enhance code analysis workflow by adding workspace sanity checks and refining OSV-Scanner commands to ensure proper execution with package-lock.json, improving overall reliability of the analysis process.
Some checks failed
Code Analysis (JS/Vue) / analyze (push) Has been cancelled
2025-12-20 16:01:25 +01:00
Torsten Schulz (local)
ca204e6ef9 Add gitleaks binary and archive; remove README.md
All checks were successful
Code Analysis (JS/Vue) / analyze (push) Successful in 3m51s
2025-12-20 15:49:21 +01:00
Torsten Schulz (local)
e55ca48de8 Reorganize code analysis workflow to run gitleaks scan before installing dependencies, ensuring more accurate results and maintaining a cleaner environment for subsequent analysis steps.
Some checks failed
Code Analysis (JS/Vue) / analyze (push) Failing after 8s
2025-12-20 15:45:02 +01:00
Torsten Schulz (local)
60257edde3 Update code analysis workflow to remove node_modules along with build artifacts before gitleaks scanning, improving security and ensuring a cleaner environment for analysis.
Some checks failed
Code Analysis (JS/Vue) / analyze (push) Failing after 3m50s
2025-12-20 15:35:03 +01:00
Torsten Schulz (local)
111c8c239c Refactor code analysis workflow by adding gitleaks detection command and removing obsolete output files to streamline the build process and enhance security checks.
Some checks failed
Code Analysis (JS/Vue) / analyze (push) Failing after 3m34s
2025-12-20 15:29:58 +01:00