Torsten Schulz (local)
fa9980ea44
Improve passkey registration error handling and options serialization
...
Enhance the registration process by adding error handling for the WebAuthn startRegistration method and ensuring the presence of required options. Include debug logging for received options and serialize the options correctly before returning them in the API response, improving robustness and clarity in the registration flow.
2026-01-07 21:30:13 +01:00
Torsten Schulz (local)
5f35a74673
Enhance passkey registration handling with error checks and CORS support
...
Add validation for server response in the registration process, ensuring the presence of necessary options. Implement CORS headers for cross-device authentication and increase the timeout for registration to 5 minutes. Include debug logging for options structure to aid in troubleshooting.
2026-01-07 21:24:11 +01:00
Torsten Schulz (local)
25870fce9b
Refactor CORS header handling in authentication endpoints
...
Update the CORS header variable name from 'origin' to 'requestOrigin' in both login and registration API endpoints for improved clarity and consistency. This change enhances the readability of the code while maintaining support for cross-device authentication.
2026-01-07 21:02:58 +01:00
Torsten Schulz (local)
f330bc1ca6
Add CORS support for Cross-Device Authentication in passkey handling
...
Enhance authentication options in the server API by adding CORS headers to support cross-device authentication. Implement handling for preflight OPTIONS requests and increase timeout for registration and authentication processes to 5 minutes, improving user experience and compatibility across devices.
2026-01-07 20:59:48 +01:00
Torsten Schulz (local)
3109c4aada
Refactor authentication handling in Navigation and registration components to support lazy store access, improving resilience against Pinia initialization issues. Enhance registration logic to include optional password fallback for passkey users, with validation checks for password strength and confirmation. Update server-side registration to handle optional password securely, ensuring consistent user experience across different authentication methods.
2026-01-07 20:16:17 +01:00
Torsten Schulz (local)
50d634eb2e
Implement passkey recovery feature, including email link requests and registration options. Update login and registration pages to support passkey authentication, with UI enhancements for user experience. Add server-side handling for passkey registration and login, including account activation checks. Update environment configuration for passkey recovery TTL settings.
2026-01-07 18:37:01 +01:00
Torsten Schulz (local)
13ea77f554
Refactor deployment script to handle symlinking of public data conditionally based on git tracking status, improving error handling for uncommitted changes. Update PM2 configuration to directly start the Node server for Nuxt 4 production builds in both harheimertc.config.cjs and harheimertc.simple.cjs. Modify user ID handling in registration options to use Uint8Array for compatibility with @simplewebauthn/server.
2026-01-07 18:06:09 +01:00
Torsten Schulz (local)
5ce064cff0
Update Apache SSL configuration and enhance security features across multiple files. Changed X-Frame-Options to SAMEORIGIN for better security, added optional Content Security Policy headers for testing, and improved password handling with HaveIBeenPwned checks during user registration and password reset. Implemented passkey login functionality in the authentication flow, including UI updates for user experience. Enhanced image upload processing with size limits and validation, and added rate limiting for various API endpoints to prevent abuse.
2026-01-05 11:50:57 +01:00
Torsten Schulz (local)
390b7daefc
Update dependencies to include TinyMCE and Quill, enhance Navigation component with a new Newsletter submenu, and implement role-based access control for CMS features. Refactor user role handling to support multiple roles and improve user management functionality across various API endpoints.
2025-12-19 09:51:28 +01:00
Torsten Schulz (local)
2dc0bc7d67
Add dotenv package for environment variable management and refactor SMTP credential handling in email services. Enhance error handling for missing SMTP credentials across various API endpoints to improve reliability and maintainability.
2025-12-18 12:19:23 +01:00
Torsten Schulz (local)
42fa9c7dc2
Implement member management enhancements; add bulk import functionality and duplicate checking based on geburtsdatum. Update API to support new fields and improve error handling for member data submissions. Refactor member-related components for better user experience and data validation.
2025-11-05 14:34:31 +01:00
Torsten Schulz (local)
71dc7278e5
Fix cookie secure flag for HTTP testing and add Pinia store
2025-10-21 14:25:07 +02:00
Torsten Schulz (local)
a10b69b5fd
Add user management system with approval workflow and role assignment
2025-10-21 11:35:02 +02:00
Torsten Schulz (local)
f3c08cfb71
Add authentication system with login, password reset, and member area
2025-10-21 11:23:06 +02:00