binwiederhier
74240328dc
Changelog, constant time compare
2026-06-22 21:21:48 -04:00
Philipp C. Heckel
3bfb9f334b
Merge pull request #1795 from lmorchard/fix/sync-topic-deny-all
...
Grant users access to their own sync topic under deny-all (fixes #733 )
2026-06-22 21:17:37 -04:00
binwiederhier
4313b02fc6
Allow primary email for provisioend users
2026-06-22 12:59:50 -04:00
binwiederhier
5808c4d4c0
Rename variable
2026-06-21 11:53:25 -04:00
binwiederhier
954fae44dc
Make more readable
2026-06-21 11:47:14 -04:00
binwiederhier
d7dea6d250
Review
2026-06-21 11:19:49 -04:00
binwiederhier
2ee8717e0c
Don't use consts in queries
2026-06-20 13:58:23 -04:00
Les Orchard and Claude Opus 4.8
cac3b2986a
Grant users access to their own sync topic under deny-all
...
Manager.Authorize had no special case for a user's own sync topic, so with
auth-default-access=deny-all the per-account sync topic (st_...) fell through
to the default access and was denied. This broke web app account sync for
non-admin users: wss://.../st_<id>/ws returned 403. Admin-role users were
unaffected via the existing role bypass.
Allow a user full access to their own SyncTopic in Authorize. This fixes
existing users without a migration, since it needs no ACL row.
Fixes #733
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-06-17 11:58:29 -07:00
binwiederhier
99bc803271
Code review
2026-06-16 21:18:58 -04:00
binwiederhier
d8c87d04e7
Update privacy policy, code review
2026-06-16 20:56:22 -04:00
binwiederhier
4516adea36
Lots of refinement
2026-06-12 17:36:40 -04:00
binwiederhier
33ae31055c
Phase 3+4
2026-06-12 14:23:32 -04:00
binwiederhier
30dd4840a2
Phase 2, email verification rework, ui stuff
2026-06-12 11:40:59 -04:00
binwiederhier
fd716e4807
Phase 1
2026-06-12 11:07:48 -04:00
binwiederhier
b4cb1bb7fb
Fix race and a small issue with the access cache
2026-06-03 21:01:52 -04:00
binwiederhier
869f005136
Review
2026-06-01 21:15:43 -04:00
binwiederhier
ae27172f8d
Add trace logs
2026-06-01 20:30:05 -04:00
binwiederhier
e18329a17e
Log changes
2026-06-01 14:08:33 -04:00
binwiederhier
104182a8be
Log reload
2026-06-01 12:47:21 -04:00
binwiederhier
a2dc290f31
Review
2026-05-31 21:25:53 -04:00
binwiederhier
0e2c459d6b
Further review
2026-05-31 15:42:12 -04:00
binwiederhier
2f4afbdae5
Manual refinements
2026-05-31 15:26:28 -04:00
binwiederhier
204723f3c0
Make opt-in flag
2026-05-31 14:28:04 -04:00
binwiederhier
301be79f0a
Per-user reload
2026-05-31 14:11:55 -04:00
binwiederhier
03d405ed80
Rename acl cahce
2026-05-31 11:42:54 -04:00
binwiederhier
25520c4505
WIP: Access cache
2026-05-28 17:13:14 -04:00
binwiederhier
61dd788dac
WIP: Email verification
2026-03-29 22:47:38 -04:00
binwiederhier
3d9ce69042
PG races
2026-03-16 15:48:36 -04:00
binwiederhier
59ce581ba2
Fix postgres primary/replica races
2026-03-16 11:21:21 -04:00
binwiederhier
6b38acb23a
Route authorization query to read-only database replica to reduce primary database load
2026-03-15 22:01:19 -04:00
binwiederhier
ac65df1e83
Move auth queries to primary, redo health check loop
2026-03-11 20:26:29 -04:00
binwiederhier
f1865749d7
WIP: Postgres read-only replica
2026-03-10 22:17:40 -04:00
binwiederhier
0d4b1b00e6
Users() optimization to help with startup time
2026-03-06 14:46:53 -05:00
binwiederhier
ea4739f79b
Extract ExecTx
2026-03-02 19:45:35 -05:00
binwiederhier
11c79a6369
Refine again
2026-03-01 14:24:06 -05:00
binwiederhier
039566bcaf
REmove unused
2026-03-01 11:59:24 -05:00
binwiederhier
544ce112b5
Manual review
2026-03-01 11:44:22 -05:00
binwiederhier
c19377109e
Small refinements
2026-02-28 21:15:51 -05:00
binwiederhier
ccbd02331c
Re-add execTx
2026-02-28 19:49:01 -05:00
binwiederhier
542aa403d2
Re-order functions
2026-02-28 19:34:09 -05:00
binwiederhier
ebb48e217d
Merge user store and manager
2026-02-28 17:35:35 -05:00
binwiederhier
c66fa92341
Re-add tx integrity
2026-02-26 16:54:56 -05:00
binwiederhier
28a436c0d2
Optimizations
2026-02-23 14:11:36 -05:00
binwiederhier
b02366b42b
Make more consistent
2026-02-23 13:49:54 -05:00
binwiederhier
850a9d4cc4
Fix bug with provisioned token removal
2026-02-22 20:28:37 -05:00
binwiederhier
07c3e280bf
Refactor user package to Store interface with PostgreSQL support
...
Extract database operations from Manager into a Store interface with
SQLite and PostgreSQL implementations using a shared commonStore.
Split SQLite migrations into store_sqlite_migrations.go, use shared
schema_version table for PostgreSQL, rename user_user/user_tier tables
to "user"/tier, and wire up database-url in CLI commands.
2026-02-16 22:39:54 -05:00
binwiederhier
ceda5ec3d8
Move things in user package
2026-02-16 21:04:15 -05:00
binwiederhier
5244e0be14
Fix tests
2025-08-09 10:04:57 -04:00
binwiederhier
ea338ae4fa
Make it easy to build without Stripe
2025-08-07 16:41:39 +02:00
binwiederhier
c4c4916bc8
Do not allow changing tokens, user role, or delete users
2025-08-04 22:22:59 +02:00
binwiederhier
Philipp C. Heckel
Les OrchardandClaude Opus 4.8