Skip to content

Admin portal auth#78

Merged
victor-cuevas merged 3 commits intofeat/admin-portalfrom
feat/admin-auth
Apr 16, 2026
Merged

Admin portal auth#78
victor-cuevas merged 3 commits intofeat/admin-portalfrom
feat/admin-auth

Conversation

@victor-cuevas
Copy link
Copy Markdown
Contributor

No description provided.

@victor-cuevas victor-cuevas requested a review from qarlosh April 9, 2026 10:01
@victor-cuevas victor-cuevas changed the title Admi portal auth Admin portal auth Apr 9, 2026
Bcrypt password hashing, session cookies (24h TTL / 2h idle), CSRF
double-submit cookie, IP-based login rate limiting, and CLI subcommands
for user creation and password reset.
…gement

Wire the Go auth backend into the Vue frontend: login page, password
change settings, navigation guards, CSRF token injection, and 401
session-expiry interceptor.
Comment thread admin/auth/ratelimit.go
Comment thread admin/api/auth.go
Comment thread admin/config/config.go
Comment thread admin/store/user.go Outdated
Comment thread admin/api/auth.go
Comment thread admin/api/auth_test.go Outdated
Comment thread admin/api/auth.go
Comment thread admin/auth/auth.go
Comment thread admin/cmd/chaperone-admin/main.go
Comment thread admin/ui/src/utils/api.js
- Avoid swallowing DeleteSession errors
- Discarded CreateUser errors in tests
- Rename Token to TokenHash struct field
- Added comment about clientIP assumptions
- Fix rate limiter unbounded memory by adding a Sweep method and adding a 5min goroutine in main.go
Copy link
Copy Markdown
Contributor

@sergiopalacio sergiopalacio left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

All comments addressed, fixes verified, pushback reasoning is sound. LGTM.

@victor-cuevas victor-cuevas merged commit 74cd685 into feat/admin-portal Apr 16, 2026
13 checks passed
@victor-cuevas victor-cuevas deleted the feat/admin-auth branch April 16, 2026 11:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants