Commit Graph

40 Commits

Author SHA1 Message Date
Linus Flood
814b010569 Merged in feat/curity-changes (pull request #1190)
Feat/curity changes

* Changed curity stuff

* Use env.var

* Merge branch 'master' into feat/curity-changes

* Merged master into feat/curity-changes
2025-01-20 11:44:58 +00:00
Michael Zetterberg
4a846540c3 feat: improve handling of deployment env vars
These are now defined in Netlify UI for dedicated environments (test, stage, production):

AUTH_URL
NEXTAUTH_URL
PUBLIC_URL

Code now falls back to incoming request host. Mainly used for
deployment previews which do not have Akamai in front, meaning
we do not need the above workaround as incoming request host
matches the actual public facing host. When Akamai is in front,
we lose the public facing host in Netlify's routing layer as they
internally use `x-forwarded-for` and we can't claim it for our usage.
2024-10-15 17:03:36 +02:00
Simon Emanuelsson
2337d37f1a feat(SW-160): update profile 2024-08-23 09:09:55 +02:00
Michael Zetterberg
a33a69fb58 fix: improve auth handling and logging 2024-08-22 14:07:36 +02:00
Hrishikesh Vaipurkar
01bd7d2299 feat(SW-158): Updated to use custom cookie and optimization 2024-08-19 12:02:08 +02:00
Hrishikesh Vaipurkar
ce51402443 feat: SW-158 Optimized comments 2024-08-19 12:02:06 +02:00
Hrishikesh Vaipurkar
cdd83a4346 feat: SW-158 Tracking support 2024-08-19 12:02:06 +02:00
Hrishikesh Vaipurkar
d3ae62eff1 feat: SW-158 Updated new param loginKey and callback url support 2024-08-19 12:02:05 +02:00
Hrishikesh Vaipurkar
2ce21626b9 feat: SW-158 Enabled support for authjs nonce 2024-08-19 12:02:04 +02:00
Niclas Edenvin
819ac454b0 Merged in feature/refresh-token (pull request #401)
feat: SW-101 Proactively refresh tokens

Approved-by: Michael Zetterberg
2024-08-16 13:56:09 +00:00
Hrishikesh Vaipurkar
6ef4da125d feat(SW-162): MFA expiry set with token expiry 2024-08-14 11:18:35 +02:00
Hrishikesh Vaipurkar
51df6bfd34 feat(SW-162): Used token instead of cookie 2024-08-14 10:44:14 +02:00
Hrishikesh Vaipurkar
13ded529cc feat(SW-162): Updated MFA to use basic cookie validation 2024-08-14 10:44:13 +02:00
Hrishikesh Vaipurkar
767f5b5d2e feat: SW-162 Inserted all three scopes 2024-08-14 10:44:12 +02:00
Hrishikesh Vaipurkar
8ab77a5522 feat: SW-162 Updated as per review comments 2024-08-14 10:44:11 +02:00
Hrishikesh Vaipurkar
dde2b828cb feat: SW-162 MFA for Profile implemented 2024-08-14 10:44:10 +02:00
Michael Zetterberg
71dcf30719 fix: make sure all logged errors are preceeded with a message
Just logging an error makes it difficult to relate the error log to code in the
codebase. Error logging a message right before the error itself makes it easier
to search the codebase for that error log.
2024-07-24 11:32:15 +02:00
Christel Westerberg
c7446032fe fix: handle webviews 2024-07-15 13:35:36 +02:00
Christel Westerberg
73cea4ba51 fix: add channel and pageType 2024-07-15 13:35:36 +02:00
Christel Westerberg
c96008fb78 fix: track user on page load 2024-07-15 13:35:36 +02:00
Niclas Edenvin
e83c967eb3 Add some console logging to auth, for debug 2024-07-12 16:23:35 +02:00
Christel Westerberg
9a9b850657 fix: cleanup auth logs 2024-06-28 13:54:22 +02:00
Christel Westerberg
eb895e8a27 chore: add logs to debug auth 2024-06-25 15:19:05 +02:00
Arvid Norlin
675228e4e9 chore: remove logs 2024-05-24 13:01:40 +02:00
Arvid Norlin
c45380d8e2 debug: add logging 2024-05-24 11:36:00 +02:00
Matilda Landström
1777ed0205 chore: update logout route as login 2024-05-23 14:05:02 +02:00
Simon Emanuelsson
c4912bbb94 feat(WEB-215): add refresh_token 2024-05-20 02:43:59 +02:00
Michael Zetterberg
f5108d1a8e feat: improve structure and error handling 2024-05-20 00:51:16 +02:00
Michael Zetterberg
8e05f03f16 chore(debug): next-auth url 2024-04-28 09:40:09 +02:00
Michael Zetterberg
99ba0b0663 fix(WEB-132): add debug env var for next-auth 2024-04-26 11:56:50 +02:00
Michael Zetterberg
e2252c01cf feat: set NEXTAUTH_URL based on DEPLOY_PRIME_URL on Netlify 2024-04-23 14:28:11 +02:00
Simon Emanuelsson
55794034c5 feat(WEB-169): get profile data from API 2024-04-18 13:53:49 +02:00
Michael Zetterberg
7d0e58a7fe fix: authjs config 2024-04-17 17:16:27 +02:00
Michael Zetterberg
41c29efd82 chore: move /api to /api/web 2024-04-16 11:11:48 +02:00
Michael Zetterberg
7be4766c00 feat(WEB-132): add seamless login flow 2024-04-10 12:48:44 +02:00
Michael Zetterberg
7093a0b2dd feat(WEB-132): add middlewares, support for seamless login and improve lang based routes 2024-04-10 11:23:38 +02:00
Simon Emanuelsson
ec4da5798b feat(WEB-127): add trpc to handle requests both serverside and clientside 2024-03-27 11:56:06 +01:00
Simon Emanuelsson
445e523c9a feat: add redirect_proxy url to handle auth in stage, test 2024-03-27 09:12:14 +01:00
Simon Emanuelsson
b173c2fb11 feat(WEB-128): desktop and mobile initial wireframe implemented 2024-03-19 07:40:14 +01:00
Arvid Norlin
70f9c22410 feat: add login and print user object on my-pages 2024-03-14 11:02:36 +01:00