Refactor/auth (#360)

* refactor: replace oslo/password * refactor sessions * refactor permission manager, type for actions * refactor auth flows * check token using id not token itself * do not leak session token in /me * fix happy path
cellajs · Jan 29, 2025 · dcfc4e1 · dcfc4e1
1 parent 2295fc0
commit dcfc4e1
Show file tree

Hide file tree

Showing 103 changed files with 2,430 additions and 5,845 deletions.
diff --git a/backend/.env.example b/backend/.env.example
@@ -13,6 +13,9 @@ UNSUBSCRIBE_TOKEN_SECRET=some_secret_token
 # Secret for argon2id password (required)
 ARGON_SECRET=argon_two_secret
 
+# Secret for cookies (required)
+COOKIE_SECRET=cookie_secret
+
 # Remote system access IP (required) (for multiple IPs, separate by comma)
 REMOTE_SYSTEM_ACCESS_IP=*
 

diff --git a/backend/drizzle/0000_lowly_husk.sql b/backend/drizzle/0000_lowly_husk.sql