github/penpot
1
0
Fork 0
mirror of https://github.com/penpot/penpot.git synced 2026-05-19 23:13:39 +00:00
Code Issues Packages Projects Releases Wiki Activity
19,325 Commits 190 Branches 288 Tags
Commit Graph

68 Commits

Author SHA1 Message Date
Andrey Antukh
ce2d3d1652 🐛 Fix incorrect handling of session renewal 
A regression introduced in the prev auth refactor.
 2025-11-18 20:35:16 +01:00
Andrey Antukh
363b4e3778
♻️ Make the SSO code more modular (#7575) 
* 📎 Disable by default social auth on devenv

* 🎉 Add the ability to import profile picture from SSO provider

* 📎 Add srepl helper for insert custom sso config

* 🎉 Add custom SSO auth flow
 2025-11-12 12:49:10 +01:00
Andrey Antukh
28cf67e7ff
🎉 Add management RPC API (#7700) 
* 🎉 Add management RPC API

And refactor internal http auth flow

* 📎 Adjust final url namings

* 📚 Update changelog
 2025-11-10 17:10:59 +01:00
Andrey Antukh
14d53c224f 🔥 Remove unused auth-data cookie asignation 2025-10-07 12:47:12 +02:00
Andrey Antukh
61d9b57bc7 ♻️ Refactor internal tokens API 
Mainly make it receive the whol cfg/system instead only props. This
makes the api more flexible for a future extending without the need
to change the api again.
 2025-10-07 12:08:00 +02:00
Andrey Antukh
bd63598185 🎉 Add virtual clock implementation 2025-10-07 12:08:00 +02:00
Andrey Antukh
283eb0419c ♻️ Refactor time related namespaces 
Mainly removes the custom app.util.time namespace
from frontend and backend and normalize all to use
the app.common.time namespace
 2025-08-01 11:20:01 +02:00
Andrey Antukh
3074fc9ab5
♻️ Remove deprecated with-atomic and refactor tx-run! (#5915) 
* ♻️ Remove deprecated with-atomic and refactor tx-run!

* ✨ Do not hold open connection for the whole clone-template operation
 2025-02-24 11:15:44 +01:00
Andrey Antukh
88fb5e7ab5 ♻️ Update integrant to latest version 
This upgrade also includes complete elimination of use spec
from the backend codebase, completing the long running migration
to fully use malli for validation and decoding.
 2024-11-13 19:09:19 +01:00
Andrey Antukh
51ecbf15a9 ⬆️ Update yetti and http server dependency 2024-10-22 20:23:38 +02:00
Andrey Antukh
abff7d324d ✨ Improve auth-data xdomain cookie 2024-05-27 10:58:05 +02:00
Andrey Antukh
91118bec70 ✨ Improve internal naming of setup/props 
This reverts commit a6f70c77cbe72875875ab83587d5dcd9cfc61e34.
 2024-03-14 10:48:23 +01:00
alonso.torres
a6f70c77cb Revert "✨ Improve internal naming of setup/props" 
This reverts commit f525c6df5e9785df9b534b6de1b5308084627699.
 2024-03-13 16:21:12 +01:00
Andrey Antukh
f525c6df5e ✨ Improve internal naming of setup/props 2024-03-13 11:39:53 +01:00
Andrey Antukh
1bc4001e70 ✨ Add the ability to set :string for cookie same-site 
By configuration. The default is :lax (unchanged)
 2024-03-05 19:47:29 +01:00
Andrey Antukh
bb5a4c0fa5 ✨ Update yetti and adapt for ring-2.0 2023-11-27 14:25:12 +01:00
Andrey Antukh
5d93f17efc 🐛 Fix session renewal mechanism 2023-11-08 17:11:42 +01:00
Andrey Antukh
aafbf6bc15 ♻️ Refactor cocurrency model on backend 
Mainly the followin changes:

- Pass majority of code to the old and plain synchronous style
  and start using virtual threads for the RPC (and partially some
  HTTP server middlewares).
- Make some improvements on how CLIMIT is handled, simplifying code
- Improve considerably performance reducing the reflection and
  unnecesary funcion calls on the whole stack-trace of an RPC call.
- Improve efficiency reducing considerably the total threads number.
 2023-03-14 12:30:27 +01:00
Andrey Antukh
69556f19ac ✨ Add more logging to OIDC providers 2023-02-07 18:16:55 +01:00
Andrey Antukh
bb055a3c84 ♻️ Refactor logging subsystem and error reporting 2023-02-02 13:38:04 +01:00
Andrey Antukh
db689d151e ♻️ Refactor profile and session handling 
- makes the profile access more efficient (replace in-app joins to a
  simple select query on profile table
- add partial support for access-tokens (still missing some RPC methods)
- move router definitions to specific modules and simplify the main http
  module definitions to simple includes
- simplifiy authentication code related to access-tokens and sessions
- normalize db parameters with proper namespaced props
- more work on convert all modules initialization to use proper specs
  with fully-qualified keyword config props
 2023-01-18 10:51:58 +01:00
Andrey Antukh
c13730dca7 🐛 Fix incorrect request flow handling on session middleware 
an issue introduced in previous commits
 2022-12-16 16:59:34 +01:00
Andrey Antukh
408d33bdec 🐛 Fix incorrect auth cookie decoding on first stage session middleware 2022-12-16 09:33:24 +01:00
Andrey Antukh
43ab19f690 ♻️ Refactor (minor) of http session code 
The rationale behind the refactor:
- Make available profile data to other middlewares without
  the need to access to the database (mainly for error reporting).
- Align with codestyle with the rest of internal modules.
- Simplify code.
 2022-11-07 08:37:43 +01:00
Andrey Antukh
41134f22e9 📎 Update license header 2022-09-20 23:23:22 +02:00
Andrey Antukh
028e0c5b70 🎉 Add /readyz http endpoint for backend & exporter 2022-09-13 11:03:41 +02:00
Andrey Antukh
ec3651d85b 🎉 Add optional rate limit support for RPC calls 2022-08-31 12:55:48 +02:00
Andrey Antukh
d6d9d25fce ♻️ Refactor token generation API 2022-08-31 11:01:07 +02:00
Andrey Antukh
adbadc8743 ♻️ Refactor session management 2022-08-08 07:54:15 +02:00
Andrey Antukh
91baae3580 📎 Minor change on session internal timestamp handling 2022-08-01 13:10:01 +02:00
Andrey Antukh
b944d977bb 🎉 Add binfile import/export internal functionality 2022-06-27 11:12:00 +02:00
Andrey Antukh
1b444a42f2 ♻️ Refactor http server layer 
Make it fully asynchronous.
 2022-03-09 17:18:06 +01:00
Andrey Antukh
9e4a50fb15 ♻️ Refactor backend to be more async friendly 2022-03-03 16:05:52 +01:00
Andrey Antukh
7cf27ac86d ♻️ Refactor general resource and concurrency model on backend 2022-02-22 13:05:41 +01:00
Andrey Antukh
7eed8c5ee5 Merge remote-tracking branch 'origin/main' into develop 2022-02-16 11:23:26 +01:00
Andrey Antukh
e9fe1800e0 ✨ Fix minor issues on session expiration handling 2022-02-15 13:25:06 +01:00
Andrés Moya
af74a1575b 🐛 Clear authentication cookies when logged out 2022-02-11 10:07:03 +01:00
Andrés Moya
62a67bdb94 🎉 Set a domain cookie to check for logged from landing page 2022-02-09 15:25:40 +01:00
Andrey Antukh
bc2a0432b9 ✨ Allow connect to read-only databases. 2022-01-27 16:11:32 +01:00
Andrey Antukh
03c91664cb 🐛 Fix session invalidation issue on password change. 2022-01-14 13:44:58 +01:00
Andrey Antukh
2feb22d3bd 🐛 Fix unexpected default cookies behavior on redirectiong to penpot. 
The SameSite=Strict on chrome behaves differently than in Firefox and
makes the top-level url redirect not sending cookies if the user is
redirected from other page to penpot. The SameSite=Lax fixes the issue.
 2022-01-12 10:55:47 +01:00
Andrey Antukh
9f0e156916 ✨ Improve error reporting. 2021-12-30 19:39:32 +01:00
Andrey Antukh
1839397ebc ✨ Minor enhacements on log processing. 2021-12-23 18:36:58 +01:00
Andrey Antukh
31c07274cd 📎 Increase default session expiration to 15 days. 2021-12-22 18:44:49 +01:00
Andrey Antukh
eb1bcfba83 🎉 Backport questions form integration. 
Among other related that need to be ported.
 2021-12-20 16:16:29 +01:00
Andrey Antukh
e7003dde83 ✨ Add :insecure-register flag. 
This allows on-premise users skip the email validation.
 2021-11-10 23:21:41 +01:00
alonso.torres
a7241d4128 ✨ Change cookie config 2021-10-20 17:12:45 +02:00
Andrey Antukh
b64d5ef357 🎉 Add unified logging api. 2021-09-30 11:48:14 +02:00
Andrey Antukh
9f034c7e7e ✨ Disable excesive logging of some modules. 2021-06-02 11:27:22 +02:00
Andrey Antukh
7cf120e2e1 ✨ Move events batching to a util/async ns. 2021-05-10 14:53:47 +02:00