6 Commits

Author	SHA1	Message	Date
surtur	4d10510f5b	go: always defer adding headers	2023-09-10 14:16:57 +02:00
surtur	882b7dfd28	go: add more logs on unauthorised access ... * log details about unauthorised access * return semantically correct 403 (instead of 401) on unauthorised access * allow read-only admin access to "hibp breach details" endpoint	2023-09-10 14:12:13 +02:00
surtur	96c0b53493	go,tmpl: implement+activate validator ... also ad initial password change: * switch the password field type to `password` * add a field for repeated password	2023-09-08 22:56:17 +02:00
surtur	1b2d860beb	fix(go,tmpl): solve the Chromium/Safari logout... ... ...issue by deleting the session cookie after successful password change and forcing the user to re-authenticate. additionally, split the InitialPasswordChange func into separate "GET" and "POST" variants.	2023-09-04 19:21:01 +02:00
surtur	f4bd798821	fix(go): reject empty/same passwd on init change	2023-09-04 11:28:23 +02:00
surtur	6b45213649	go: add user onboarding, HIBP search functionality ... * add user onboarding workflow * fix user editing (no edits of passwords of regular users after onboarding) * refresh HIBP breach cache in DB on app start-up * display HIBP breach details * fix request scheduling to prevent panics (this still needs some love..) * fix middleware auth * add TODOs * update head.tmpl * reword some error messages	2023-08-24 18:43:24 +02:00