Commit Graph

19 Commits

Author SHA1 Message Date
294fadfe4c fix(backend): optional auth ret 401 if token invalid 2025-12-29 01:01:28 +00:00
c3a173de66 fix(backend): remove unused secure cookie config 2025-12-29 00:36:08 +00:00
f4620dff3a fix(backend): optional auth for share routes
Add auth.NewOptionalAuthMiddleware to run auth only when credentials are
present (Authorization header or auth cookies). Use it on share
consumption routes so public shares remain accessible unauthenticated,
while authenticated callers can resolve account-scoped shares. This
prevents a panic in share middleware when accountId was provided but the
request wasn’t authenticated (nil reqctx.AuthenticatedUser type
assertion).
2025-12-29 00:07:44 +00:00
3686f87377 feat: suppor tokenDelivery field for account reg 2025-12-16 00:41:30 +00:00
3b37a8d189 fix: auto refresh if access token not in cookies 2025-12-15 00:38:23 +00:00
05edf69ca7 refactor: initial frontend wiring for new api 2025-12-15 00:13:10 +00:00
7b13326e22 docs: add OpenAPI documentation with Scalar UI
- Add swaggo annotations to all HTTP handlers
- Add Swagger/OpenAPI spec generation with swag
- Create separate docs server binary (drexa-docs)
- Add Makefile with build, run, and docs targets
- Configure Scalar as the API documentation UI

Run 'make docs' to regenerate, 'make run-docs' to serve.
2025-12-13 22:44:37 +00:00
539b15dcb7 refactor: introduce reqctx pkg for request context 2025-12-04 00:48:43 +00:00
57167d5715 feat: impl cookie-based auth tokens exchange
implement access/refresh token exchange via cookies as well as automatic
access token refresh
2025-12-04 00:26:20 +00:00
d4c4e84fbf feat: use argon2id to hash refresh tokens in db 2025-12-03 23:05:00 +00:00
3a6fafacca feat: impl refresh token rotation 2025-12-03 00:07:39 +00:00
033ad65d5f feat: improve err logging 2025-11-30 19:19:33 +00:00
987edc0d4a fix: timestamp cols default not working 2025-11-30 17:42:35 +00:00
89b62f6d8a feat: introduce account 2025-11-30 17:12:50 +00:00
629d56b5ab fix: registration endpoint and db auto close issue 2025-11-29 20:51:56 +00:00
834517f3c0 fix: check for correct user exist err in register 2025-11-26 01:45:28 +00:00
06c3951293 fix: ret invalid cred if usr not found in login 2025-11-26 01:42:52 +00:00
389fe35a0a feat: impl bearer auth middleware 2025-11-26 01:09:42 +00:00
1feac70f7f feat: initial backend scaffolding
migrating away from convex

Co-authored-by: Ona <no-reply@ona.com>
2025-11-10 00:19:30 +00:00