Commit Graph

24 Commits

Author SHA1 Message Date
Abdullah Atta 34fa43f302 global: add some basic rate limiting 2025-07-15 13:34:31 +05:00
Abdullah Atta 11dff4f0cc identity: move email sender to common 2025-04-10 12:19:49 +05:00
Abdullah Atta e5bf3367cc global: add support for -DSTAGING 2024-11-28 14:38:28 +05:00
Abdullah Atta 8d15e176ff docker: DISABLE_ACCOUNT_CREATION -> DISABLE_SIGNUPS 2024-10-25 12:40:53 +05:00
Abdullah Atta 1b97ba77da identity: use new server PublicURL 2024-10-12 11:56:57 +05:00
Abdullah Atta cbd0c01d28 identity: add support for disabling new signups 2024-08-01 10:32:51 +05:00
Abdullah Atta ad590f6011 identity: auto enable 2fa by email on self hosted instance 2024-08-01 10:05:46 +05:00
Abdullah Atta 2f5bd75d4e identity: confirm email automatically on self hosted instances 2024-08-01 09:56:06 +05:00
Abdullah Atta 99da765a1c api: use wamp services instead of forwarding http requests for internal apis 2024-06-07 15:35:31 +05:00
Abdullah Atta abe7e67933 identity: include scope when validating account recovery token 2024-05-16 13:15:04 +05:00
Abdullah Atta cece6ad4e2 identity: catch and log errors during signup 2024-03-05 10:08:14 +05:00
Abdullah Atta 1f72e2c3a8 identity: fix session revokation 2023-10-28 11:08:17 +05:00
Abdullah Atta d91df60c57 identity: reset user 2fa on password reset 2023-09-09 20:31:02 +05:00
Abdullah Atta 87fd5b8196 identity: delete user completely on unregister 2023-06-28 17:16:29 +05:00
Abdullah Atta 5e95cd5ec9 identity: do not enable mfa on sign up 2023-06-28 17:13:01 +05:00
Abdullah Atta eb45e8c3ce identity: enable mfa after user confirms email 2023-06-28 17:12:49 +05:00
Abdullah Atta 0ad00c9747 identity: make 2fa truly mandatory 2023-06-08 12:55:27 +05:00
Abdullah Atta 26703bfd8e identity: add support for toggling marketing consent 2023-06-08 12:54:57 +05:00
Abdullah Atta 5ca66f5819 identity: save which platform a user signed up from
this is normalized to web, android or iOS.
Specific device information is not saved.
2023-05-22 18:23:22 +05:00
Abdullah Atta 20eec79cef identity: prevent users with disposable emails from signing up
while this is not a perfect way to prevent abuse of service, we do want
to avoid getting spammed with fake accounts. Creating a valid email
account is significantly more cumbersome than using a disposable email
address.

Currently the list of blacklisted domains is extracted from
https://github.com/disposable/disposable
and it is refreshed after every 24 hours.
2023-03-02 17:43:10 +05:00
Abdullah Atta f38e61d58f global: update copyright year to 2023 2023-01-16 13:33:47 +05:00
Abdullah Atta fc17e7a2fb identity: add support for account email changing 2023-01-16 13:25:38 +05:00
Abdullah Atta c0fab8a735 global: make ready for self hosting
This exposes a few more env vars for configuration &
bypasses the Subscription backend
so each user is Pro by default. This is required because there won't be
any mechanism for the user to upgrade. We'll also have to disable a few
things on the client side to avoid confusion.
2022-12-30 11:23:02 +05:00
Abdullah Atta 4e9f82fe48 open source identity server 2022-12-28 17:24:47 +05:00