Commit graph

20 commits

Author SHA1 Message Date
Echo
e9f780d1e5
one update a day keeps the bugs away! (#183) 2026-02-28 13:54:41 -05:00
Mahad Kalam
5e5ab158ed
Allow using tempmails outside prod (#179) 2026-02-17 12:41:58 -05:00
EvanStreams
34b2246120
New join default now SCG in #welcome-to-hack-club (#172) 2026-02-02 13:12:38 -05:00
24c02
bec5543cbf bump valid_email2 2026-01-20 22:13:01 -05:00
Mahad Kalam
5562fe2c06
WebAuthn/passkeys support (#53)
god i hope any of this works
2026-01-13 15:48:21 -05:00
dependabot[bot]
820983b4fc
Bump ruby-vips from 2.2.4 to 2.2.5 (#2)
Bumps [ruby-vips](https://github.com/libvips/ruby-vips) from 2.2.4 to 2.2.5.
- [Changelog](https://github.com/libvips/ruby-vips/blob/master/CHANGELOG.md)
- [Commits](https://github.com/libvips/ruby-vips/compare/v2.2.4...v2.2.5)

---
updated-dependencies:
- dependency-name: ruby-vips
  dependency-version: 2.2.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-13 13:39:53 -05:00
dependabot[bot]
b8b7ba88bd
Bump puma from 6.6.0 to 7.1.0 (#36)
Bumps [puma](https://github.com/puma/puma) from 6.6.0 to 7.1.0.
- [Release notes](https://github.com/puma/puma/releases)
- [Changelog](https://github.com/puma/puma/blob/main/History.md)
- [Commits](https://github.com/puma/puma/compare/v6.6.0...v7.1.0)

---
updated-dependencies:
- dependency-name: puma
  dependency-version: 7.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-13 13:38:40 -05:00
nora
3c90b9321d
analytics (#156) 2026-01-13 12:06:36 -05:00
24c02
c96534d000 bump brakeman 2026-01-01 17:51:41 -05:00
nora
3c70ca8c28
switch error handling to sentry 2025-12-29 16:19:10 -05:00
24c02
69c2507793 rails_pulse delenda est 2025-12-29 10:26:02 -05:00
24c02
51ca041681 noooo!!! 2025-12-26 17:50:55 -05:00
nora
5c9f1d9665
add rails pulse? (#124)
* rails pulse?

* route filter

* disable auth

* no schema yet!
2025-12-22 14:29:29 -05:00
nora
87bb6d4a18
Switch mailers to SES (#72)
* add premailer

* first pass at converting existing mailers

* this EIN is not yours :-P

* remove some css that probably won't work

* that was gonna bug me

* more mailers!

* s/account/auth

* rework 2fa/security mailers

* env vars for SES creds

* add OpenSSL explicitly

* use external logo image

* nuke step_up_code
2025-12-04 16:32:32 -05:00
24c02
131ce3fec3 update brakeman 2025-12-02 12:48:31 -05:00
nora
28178e0c47
OpenID connect! (#60)
* gems

* rails generate doorkeeper:openid_connect:install

* create migration

* db:migrate

* first pass at actually adding ts

* lolwut

* better consent screen

* not yet dev db! >_<

* another pass on docs
2025-12-02 01:37:19 -05:00
nora
d7004d0f73
[Identity] switch to in-house valid_email2, better errors on invalid email (#58)
* switch valid_email2 to git source

* add more descriptive errors on failed valid_email2

* copy tweak
2025-12-01 12:41:04 -05:00
24c02
72886b039a add cloudflare-rails to fix forwarded-for? 2025-11-25 19:51:43 -05:00
nora
f02fceb531
VERSION. TWO. (#42)
* INITIAL SAML SUPPORT WOO YEA BABEY

it works?

* wawa

* mwaow

* b

* WOAG

* mph

* bunch more stuff

* new OAuth screen

* add trust level to oauth apps

* [community oauth] new scopes, validate only some community ones

* bleh

* my info first pass

* sessions and 2fa

* oauth authorizations/revoke

* nuke sms

* fix drift

* remove hcid on ident#edit

* attack our rack?

* session fixation't

* first pass at stepup auth

* eye eighteen en

* fix brand

* think that does it for dev mode!

* add promote to full user button

* first crack at landing page

* better sessions

* better id edit

* better verf

* less css pass 1

* add phone no

* better cssed?

* securité

* switch from slocks

* HCA

* touch last seen at

* session fingerprinting

* improved?

* localize scopes

* add proper oauth welcome

* eepier tutorial

* how long was that like that?!

* common blankslate

* better addresses?

* [backend] fix reprovisioning and promotion

* improve addresses

* ICONS, BEAUTIFUL ICONS

* primary sidebar

* saml welcome?

* new totp flow?

* marginally better login sec

* better print for backup codes!

* MASSIVE LINT PASS

* autocompletes

* woops

* new staging

* actual login code txnl

* no more legacy slack account linking

* fake slack in staging

* no account yet?

* add samls for staging

* fix slack_staging

* lint

* frickin' xmlsec

* no validate keys ?

* AUGH

* ASGJHFGSDJFG

* shoot me

* aieeeee

* SCHEIßE

* no more attempt association on code

* believe in prefers-color-scheme

* fix verf icon

* nuke vestigial aadhaar functionality

thanks deployor!

* fix xmlsec on gh ci

* remove identity (#27)

* move idcon flashes to locale

* remove dead code impersonation logic

h/t ian!

* fix hx-confirm on delete address?

* add missing dev app locale key

* fix #28

* wait, i'm an idiot (#28)

* THERE WE GO

* add paper_trail to more stuff

* red delete btn

* more red delete btns

* THE AUDIT LOGS UPDATE

* yuge lint pass

* Fix icons (#33)

Some icons didn't have a fill nor a viewbox

* weh

* first pass at docs

* memoize docs, fix 404

* [docs] add crappy erb support

* support non-e+ flow

* fix no devmode locale

* DOCS DOCS DOCS

* tldr dev doc

* anti-clickjacking countdown (h/t @J-Meow)

* weh

* get rid of those, they do nothing for us

* dependent destroy

* find user via scim if ent

* save nav channel ids

* fix base onboarding scenario

* only unique among the living

* add SAML debug

* simplify legacy_email

* add UAT env

* we ARE

* add slack to uat

* no entity id?

* fix saml if logged out

* fix scim assignment?

* bring channels into config

* darn it

* try backoff on assign_to_workspace?? this feels problematic

* do the scim docs lie?

* that was dumb

* Revert "do the scim docs lie?"

This reverts commit 69310dbef9476f2103d7a8280966a7fdf732129b.

* Revert "try backoff on assign_to_workspace?? this feels problematic"

This reverts commit 7a5edd67aa3836df1f31d628566e9ea69589c269.

* this some bull shit

* internal tutorial by default

* 18 point something

* fixes: componentize login, no more viewcontext, parse sp-initiated saml better

* one return to.

* just send it

* fix replay bug

* fix URL in welcome docs page (#38)

* simplify login/signup flow, s/faq/terms + privacy

* no more H... we hardly knew you

* first pass at reddening

* red pt. 2

* she's red for an AMAZING reason

* lint pass

* fix tooled tips

* another docs pass

* initial pass at factorybotting docs

* scope diffing for api docs!

* wait we don't need a legend lol

* add verf status to community apps

* fricken lint

* make current_user not nomethod

* move are_we_enterprise_yet to a flipper flag

* improve slack racing

* allow not creating slack

* factorybot in prod for api docs!

* LOL, LMAO

* properly set owner on oauthorizations

* lint pass

* bypass age on existing users

* fix that...

---------

Co-authored-by: Leo <leo@wilkin.xyz>
Co-authored-by: Tom (Deployor) <129990841+deployor@users.noreply.github.com>
Co-authored-by: DaInfLoop <github@dainfloop.is-a.dev>
2025-11-24 10:52:27 -05:00
24c02
a260c265f0 initial public commit!!! 2025-09-02 13:53:47 -04:00