5 Commits

Include renames

Author	SHA1	Message	Date
CaIon	45c3fbe8ae	fix(security): bind verification proofs to sessions and actions ... Require single-use operation proofs for passkey enrollment, two-factor setup, and channel key access. Add password and OAuth verification flows, enforce session-bound enrollment, and redact OAuth callback secrets from logs. Validation: affected Go packages pass; frontend typecheck, changed-file lint, and 111 tests pass. Security enrollment regressions pass on SQLite 3.50.4, MySQL 8.0.46, and PostgreSQL 16.15. Full frontend lint has pre-existing errors outside the changed files.	2026-09-06 22:48:59 +08:00
CaIon	d7992672a6	fix(oauth): avoid overwriting user state when binding	2026-08-11 22:03:45 +08:00
CaIon	a94142f603	fix(oauth): enhance error handling and transaction management for OAuth user creation and binding ... - Improve error handling in DeleteCustomOAuthProvider to log and return errors when fetching binding counts. - Refactor user creation and OAuth binding logic to use transactions for atomic operations, ensuring data integrity. - Add unique constraints to UserOAuthBinding model to prevent duplicate bindings. - Enhance GitHub OAuth provider error logging for non-200 responses. - Update AccountManagement component to provide clearer error messages on API failures.	2026-02-05 21:48:05 +08:00
CaIon	424595e620	feat(oauth): migrate GitHub user identification from login to numeric ID	2026-02-05 20:30:48 +08:00
CaIon	7801dc6762	refactor: unify OAuth providers with i18n support ... - Introduce Provider interface pattern for standard OAuth protocols - Create unified controller/oauth.go with common OAuth logic - Add OAuthError type for translatable error messages - Add i18n keys and translations (zh/en) for OAuth messages - Use common.ApiErrorI18n/ApiSuccessI18n for consistent responses - Preserve backward compatibility for existing routes and data	2026-02-05 20:21:38 +08:00