admin/ServerKit
1
0 Fork 0
mirror of https://github.com/jhd3197/ServerKit.git synced 2026-11-10 05:53:05 +09:00
Code Issues Packages Projects Releases Wiki Activity
3,045 Commits 13 Branches 91 Tags
dev
Commit Graph
2 Commits
Author SHA1 Message Date
Juan Denis c8c93a8e0c fix(auth): enforce MFA, scoped keys, and revocable sessions 
Add session-family revocation and migration 097, require current credentials for password changes, constrain API keys, and require verified WebAuthn authentication. Update browser token handling and add boundary regressions. Existing JWTs require fresh login; restricted keys deny undeclared endpoints.
 2026-09-05 04:29:16 -04:00
Juan Denis 47c92e0571 feat(auth): WebAuthn / Passkey support 
- Add webauthn dependency.
- Add PasskeyCredential model and Alembic migration 019_passkey_credentials.
- Add PasskeyService for registration/authentication challenge flow.
- Add auth API endpoints:
  - POST /auth/passkeys/options/register
  - POST /auth/passkeys/register
  - GET /auth/passkeys
  - DELETE /auth/passkeys/<id>
  - POST /auth/passkeys/options/authenticate
  - POST /auth/passkeys/authenticate
- Expose passkey_enabled flag in User.to_dict().
 2026-06-19 01:33:45 -04:00