79fc57a82a
Use built-in authenticate_or_request_with_http_token
...
Hat tip to @adrienpoly
2025-12-10 09:23:52 +01:00
0ce3a85778
Only allow writing when the access token has permission
2025-12-10 09:23:52 +01:00
caa4cd491e
Smooth out the finder API
2025-12-10 09:23:52 +01:00
7d2c284726
Clarify
2025-12-10 09:23:52 +01:00
467843fe22
Inline now anemic helper methods
2025-12-10 09:23:52 +01:00
3329008dd8
Handle everything in the same method
2025-12-10 09:23:52 +01:00
660fcff558
Authenticate api requests without needing a session
2025-12-10 09:23:52 +01:00
db29562c4c
Tie access token directly to session
...
We need to present them differently in the session list and prevent them
from being deleted
2025-12-10 09:23:52 +01:00
a81c681a8d
Add access token authentication via HTTP AUTHORIZATION bearer header
2025-12-10 09:23:52 +01:00
0160f215f2
Validate email before creating identity during sign-up and sign-in
...
Avoid Sentry exceptions when attackers try to stuff invalid emails. The
browser performs form field validation that should normally prevent this
from occurring, so we just return 422 without validation error messages.
Also:
- extract redirect_to_session_magic_link helper
- some controller refactoring and cleanup
2025-12-06 16:52:16 -05:00
c9ebb79dbd
Add some protections around sharing the magic link in development
2025-12-02 10:51:14 +01:00
e30709f6a7
Remove structured logging moved to the engine
2025-11-28 15:53:58 +01:00
c1334f7ffe
Don't choke if no structured logging
...
Temporary workaround, we need a better solution here.
2025-11-28 15:53:58 +01:00
5a7f08067a
Move setting Current.account into the middleware
...
so that code called from the Rails controllers can use Current.account
2025-11-17 09:12:40 -05:00
5c6b91ef77
Fix incorrect var setting
2025-11-17 09:12:36 -05:00
71a332bb08
Remove dead code
2025-11-17 09:12:17 -05:00
89d1299ec0
Fix authentication on "untenanted" controllers
...
trying out the name "disallow_account_scope" for this, but I don't
think it's quite right yet.
2025-11-17 09:11:47 -05:00
086a9ceada
Revert some auth pieces of "Account.sole → Current.account"
2025-11-17 09:11:45 -05:00
ec54014832
Add account slug middleware
...
and set Current.account
2025-11-17 09:11:42 -05:00
d41d50d52b
Account.sole → Current.account
...
and some other de-tenant changes, including removing the controller
tenanting concerns
2025-11-17 09:11:40 -05:00
2bb90eab13
Use the sole collection as the root for a better onboarding experience for new accounts
2025-11-04 17:09:35 +01:00
87d9c3cd01
Make unauthenticated access permit unauthorized access
2025-11-04 09:02:36 +01:00
393e5fd3d4
Don't want to ship with this wart
...
cc @monorkin
2025-11-03 15:30:44 +01:00
42ebdf9ac1
More natural conditional
2025-11-03 15:29:20 +01:00
49d865ffd1
Delete scoped session tokens when encountered
2025-10-31 19:00:37 +01:00
98755844a1
Remove the internal API
...
* Bind sessions to identities
* Remove references to the identity token
* Move email changes to identity
* Move account menu into a turbo-frame
* Create tenants from a tenanted route
2025-10-31 16:26:08 +01:00
201c3e27d3
Update tests for the Internal API
2025-10-31 16:26:08 +01:00
79b012f319
Add Join Codes
2025-10-31 16:24:30 +01:00
c8843360fe
Clean up and simplify magic links
2025-10-31 16:23:38 +01:00
5cef4ffeb0
Add sign in flow using magic links
2025-10-31 16:22:12 +01:00
1277cc065b
Introduce untenanted Identity and Membership models
...
The new integration test shows the desired user-facing behavior, which
is to make it easy to login without a tenanted URL and to jump between
tenants.
Note that we track two things in the identity_token cookie: a signed
id, and the updated_at for the underlying Identity object. This allows
us to effectively cache on the Identity without having to hit the
database, by using an Identity::Mock object that is compatible with
etag and cache methods.
2025-10-31 16:22:12 +01:00
04be825609
Fix identities for existing sessions
2025-10-10 10:58:30 -04:00
3399e45130
Introduce an "Identity" model to ease login
...
- New untenanted Identity and Membership models
- New `identity_token` cookie with path "/" holds state across tenants
We're not sure whether the untenanted database will be sqlite or
MySQL, and so I've been careful to minimize
- database reads, placing them behind etags and caching
- database writes, only writing when a new Session is created (login)
Note that we track two things in the identity_token cookie: a signed
id, and the updated_at for the underlying Identity object. This allows
us to effectively cache on the Identity without having to hit the
database, by using an Identity::Mock object that is compatible with
etag and cache methods.
The new integration test shows the desired user-facing behavior, which
is to make it easy to login without a tenanted URL and to jump between
tenants.
- the untenanted "login_help" page shows all linked memberships
- the jump menu shows all linked memberships (except the current)
Also introduced a utility script to populate existing employee
Identities, grouping accounts by email address.
2025-10-10 10:12:25 -04:00
2d327e6294
Render a helpful menu of tenants temporarily
2025-10-02 16:33:25 -04:00
2e4138b585
Tie etag to sessions
...
So that we don't get CSRF token issues if sharing sessions in the same browser
2025-09-15 16:31:01 +02:00
5540b0fd1b
Make sure session cookie has the correct path for the tenant
...
ref: https://fizzy.37signals.com/5986089/collections/7/cards/1234
2025-08-10 18:53:52 -04:00
57269b1b9c
Allow local authentication with LOCAL_AUTHENTICATION=1
...
You can touch `tmp/local-auth.txt` to persist this setting.
2025-08-06 17:05:35 -04:00
8e13ce5b78
Drop Current.account and just use Account.sole
...
I had reintroduced this in dacb53b86bbf68a4https://fizzy.37signals.com/5986089/collections/2/cards/1032 ).
2025-07-20 13:00:09 -04:00
0c341d14e1
Untenanted access in authenticated controllers should request auth
2025-07-03 10:05:55 -04:00
da69bd1689
Remove local authentication code
2025-07-02 11:59:21 -04:00
d0dcb6dfa8
Redirect unauthenticated users to Launchpad
2025-06-20 17:14:58 -04:00
ee60e8dd01
Signup::AccountsController suppports signing up with a new identity
2025-06-20 15:16:57 -04:00
dacb53b8b1
Launchpad login works for existing 37id identities
2025-06-20 15:16:56 -04:00
7dee9ed9d6
Log the authenticated user
...
to help track down issues reported by individuals in the logs
2025-05-07 17:13:25 -04:00
dbf61f4fc3
Use _path in all cases where we are not potentially changing the domain
2025-04-13 08:17:36 +02:00
e6bb6ad76b
Join links for user registration
2024-09-24 14:30:22 -04:00
696b155f55
Use find_signed directly
...
There's no penalty to calling with a nil value. That's why both find_signed
and find_signed! exist. Use the latter when you expect a result.
2024-09-04 13:44:23 -04:00
e3983d5bbe
Use Rails' new sessions generator to replace the existing setup
...
Ref: https://github.com/rails/rails/pull/52328
2024-08-20 14:17:05 -04:00
c4fb1bdc76
Add minimal authentication flow to get started
2024-06-21 16:45:29 +01:00
David Heinemeier Hansson