Commit graph

242 commits

Author SHA1 Message Date
24c02
bbc504d886 fix oauth revoke in audit log 2025-12-02 12:29:44 -05:00
24c02
ba38578d4a hotfix old auth url 2025-12-02 04:47:23 -05:00
24c02
fd6b2be24c fix resubmit url 2025-12-02 04:25:53 -05:00
24c02
87a5ac0cce because of course we're not running in controller context 2025-12-02 04:23:29 -05:00
24c02
fdd029d5ec a small part of the inevitable css pass 2025-12-02 03:01:38 -05:00
24c02
5e0b776e29 light-on-virtual-dark bugs 2025-12-02 03:01:23 -05:00
24c02
86f52b3750 fix oidc signing creds 2025-12-02 02:18:06 -05:00
24c02
3be99bf14e [oidc] fix stepup reauth 2025-12-02 02:06:03 -05:00
24c02
5eccc140d3 fix up github links 2025-12-02 01:46:41 -05:00
nora
f3a1e2f3ae
one final rebrand (#61)
* copy

* copy copy copy
2025-12-02 01:42:55 -05:00
nora
28178e0c47
OpenID connect! (#60)
* gems

* rails generate doorkeeper:openid_connect:install

* create migration

* db:migrate

* first pass at actually adding ts

* lolwut

* better consent screen

* not yet dev db! >_<

* another pass on docs
2025-12-02 01:37:19 -05:00
Copilot
fbe206cc57
Fix Identity#age to use integer date calculation instead of inaccurate in_years (#59)
* Initial plan

* Fix Identity#age to use date-based calculation instead of in_years

Co-authored-by: 24c02 <163450896+24c02@users.noreply.github.com>

* Refactor age calculation to use shared class method to avoid duplication

Co-authored-by: 24c02 <163450896+24c02@users.noreply.github.com>

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: 24c02 <163450896+24c02@users.noreply.github.com>
2025-12-01 23:49:18 -05:00
24c02
27a17be2ad a quick lint pass before the eternal worm devours connecticut 2025-12-01 13:07:09 -05:00
nora
d7004d0f73
[Identity] switch to in-house valid_email2, better errors on invalid email (#58)
* switch valid_email2 to git source

* add more descriptive errors on failed valid_email2

* copy tweak
2025-12-01 12:41:04 -05:00
Gary Tou
fcb5627f11
[README] Recommend bin/rails over rails (#55) 2025-11-28 14:04:32 -05:00
Gary Tou
363b4b5fa2
Bump schema version (#54)
It appears the new `return_to` column from 20251126002711_add_return_to_to_login_attempts.rb` was reflected in `schema.rb`, but the version at the top of the file wasn't updated.
2025-11-28 14:04:16 -05:00
24c02
2190dbf8e9 possibly fix approval/denial? 2025-11-28 14:01:32 -05:00
24c02
074517059d red/green approve/deny buttons! 2025-11-26 17:59:33 -05:00
24c02
d608d376df improve scim reprovision error handling? 2025-11-25 20:47:16 -05:00
24c02
72886b039a add cloudflare-rails to fix forwarded-for? 2025-11-25 19:51:43 -05:00
24c02
e21d2e0919 lil' nit 2025-11-25 19:35:16 -05:00
24c02
e9daadc12d let authns live longer 2025-11-25 19:33:04 -05:00
24c02
515ad193b1 schema.rb you've lied to me for the last time 2025-11-25 19:28:16 -05:00
24c02
7ce83dfc30 fix response scope in scimservice >_< 2025-11-25 19:15:46 -05:00
24c02
2f67c60cf4 fix cookieoverflow? 2025-11-25 19:08:49 -05:00
24c02
60f6f43174 no first last name 2025-11-25 18:41:42 -05:00
24c02
5acb6dc1e6 fix localization in delete app? 2025-11-25 12:12:52 -05:00
24c02
ec0cb69726 fix: create before destroy on apps 2025-11-24 19:50:37 -05:00
24c02
d3c88afc48 lol only do that in prod 2025-11-24 19:20:29 -05:00
24c02
0b8a338902 rename to account.hackclub.com
woag!!
2025-11-24 19:19:13 -05:00
24c02
fb8017348c hotfix for email 2025-11-24 14:16:40 -05:00
24c02
56c71b8cae migration info 2025-11-24 12:44:48 -05:00
24c02
82cee8393f reuse access token! 2025-11-24 11:34:01 -05:00
24c02
d5fb08350d fix slack saml cfg :peefest: 2025-11-24 11:18:51 -05:00
24c02
db0e10239c add slack saml app to prod 2025-11-24 11:12:43 -05:00
nora
f02fceb531
VERSION. TWO. (#42)
* INITIAL SAML SUPPORT WOO YEA BABEY

it works?

* wawa

* mwaow

* b

* WOAG

* mph

* bunch more stuff

* new OAuth screen

* add trust level to oauth apps

* [community oauth] new scopes, validate only some community ones

* bleh

* my info first pass

* sessions and 2fa

* oauth authorizations/revoke

* nuke sms

* fix drift

* remove hcid on ident#edit

* attack our rack?

* session fixation't

* first pass at stepup auth

* eye eighteen en

* fix brand

* think that does it for dev mode!

* add promote to full user button

* first crack at landing page

* better sessions

* better id edit

* better verf

* less css pass 1

* add phone no

* better cssed?

* securité

* switch from slocks

* HCA

* touch last seen at

* session fingerprinting

* improved?

* localize scopes

* add proper oauth welcome

* eepier tutorial

* how long was that like that?!

* common blankslate

* better addresses?

* [backend] fix reprovisioning and promotion

* improve addresses

* ICONS, BEAUTIFUL ICONS

* primary sidebar

* saml welcome?

* new totp flow?

* marginally better login sec

* better print for backup codes!

* MASSIVE LINT PASS

* autocompletes

* woops

* new staging

* actual login code txnl

* no more legacy slack account linking

* fake slack in staging

* no account yet?

* add samls for staging

* fix slack_staging

* lint

* frickin' xmlsec

* no validate keys ?

* AUGH

* ASGJHFGSDJFG

* shoot me

* aieeeee

* SCHEIßE

* no more attempt association on code

* believe in prefers-color-scheme

* fix verf icon

* nuke vestigial aadhaar functionality

thanks deployor!

* fix xmlsec on gh ci

* remove identity (#27)

* move idcon flashes to locale

* remove dead code impersonation logic

h/t ian!

* fix hx-confirm on delete address?

* add missing dev app locale key

* fix #28

* wait, i'm an idiot (#28)

* THERE WE GO

* add paper_trail to more stuff

* red delete btn

* more red delete btns

* THE AUDIT LOGS UPDATE

* yuge lint pass

* Fix icons (#33)

Some icons didn't have a fill nor a viewbox

* weh

* first pass at docs

* memoize docs, fix 404

* [docs] add crappy erb support

* support non-e+ flow

* fix no devmode locale

* DOCS DOCS DOCS

* tldr dev doc

* anti-clickjacking countdown (h/t @J-Meow)

* weh

* get rid of those, they do nothing for us

* dependent destroy

* find user via scim if ent

* save nav channel ids

* fix base onboarding scenario

* only unique among the living

* add SAML debug

* simplify legacy_email

* add UAT env

* we ARE

* add slack to uat

* no entity id?

* fix saml if logged out

* fix scim assignment?

* bring channels into config

* darn it

* try backoff on assign_to_workspace?? this feels problematic

* do the scim docs lie?

* that was dumb

* Revert "do the scim docs lie?"

This reverts commit 69310dbef9476f2103d7a8280966a7fdf732129b.

* Revert "try backoff on assign_to_workspace?? this feels problematic"

This reverts commit 7a5edd67aa3836df1f31d628566e9ea69589c269.

* this some bull shit

* internal tutorial by default

* 18 point something

* fixes: componentize login, no more viewcontext, parse sp-initiated saml better

* one return to.

* just send it

* fix replay bug

* fix URL in welcome docs page (#38)

* simplify login/signup flow, s/faq/terms + privacy

* no more H... we hardly knew you

* first pass at reddening

* red pt. 2

* she's red for an AMAZING reason

* lint pass

* fix tooled tips

* another docs pass

* initial pass at factorybotting docs

* scope diffing for api docs!

* wait we don't need a legend lol

* add verf status to community apps

* fricken lint

* make current_user not nomethod

* move are_we_enterprise_yet to a flipper flag

* improve slack racing

* allow not creating slack

* factorybot in prod for api docs!

* LOL, LMAO

* properly set owner on oauthorizations

* lint pass

* bypass age on existing users

* fix that...

---------

Co-authored-by: Leo <leo@wilkin.xyz>
Co-authored-by: Tom (Deployor) <129990841+deployor@users.noreply.github.com>
Co-authored-by: DaInfLoop <github@dainfloop.is-a.dev>
2025-11-24 10:52:27 -05:00
Echo
ecb8134e8f
Update README with latest changes (#13) 2025-09-22 08:29:15 -07:00
SrIzan10
98183c1937
bump minimum age to 13 (#9) 2025-09-12 20:07:13 -04:00
24c02
6cc5bb6163 let's also papertrail programs? 2025-09-02 15:39:13 -04:00
24c02
061844aa48 dang it! 2025-09-02 15:36:26 -04:00
24c02
642d427c65 add slack channel to readme 2025-09-02 14:14:25 -04:00
24c02
a260c265f0 initial public commit!!! 2025-09-02 13:53:47 -04:00