16 Commits

Author SHA1 Message Date
Abdullah Atta 75a4462fd1 identity: add client id checks in grant validators 2025-10-14 21:50:57 +05:00
Abdullah Atta 6e35edb715 global: add null safety checks 2025-10-14 21:15:51 +05:00
Abdullah Atta 76af2cbfc8 identity: fix 2fa recovery codes not working 2025-07-15 13:35:07 +05:00
Abdullah Atta 182558136a identify: validate mfa methods against user's enabled methods 2025-04-30 11:48:50 +05:00
Abdullah Atta 8d3b0d6dbf identity: validate mfa method against user's mfa methods 2025-04-30 11:45:18 +05:00
Abdullah Atta 11dff4f0cc identity: move email sender to common 2025-04-10 12:19:49 +05:00
Abdullah Atta bbabf51073 global: newline changes 2025-04-10 11:09:28 +05:00
Abdullah Atta 07675632e0 identity: enable user's 2fa method after verifying 2fa code
This must be done after the MFA code is verified otherwise the security stamp will be updated making the 2FA code invalid
2024-11-28 14:20:35 +05:00
Abdullah Atta dac2d7a577 identity: many fixes to auth grant validation 2024-05-16 13:15:41 +05:00
Abdullah Atta e21e2f1510 identity: fix no error being showed if user is locked out 2024-03-05 10:10:47 +05:00
Abdullah Atta 2c1dc6f95e identity: minor refactors 2023-09-09 20:31:21 +05:00
Abdullah Atta 5d5c179810 fix: fail by default if user has no 2fa method but is using a recovery code 2023-02-14 19:51:07 +05:00
Abdullah Atta 061a07120c fix: mfa recovery codes not working due to dual otp & recovery code checks 2023-02-14 18:02:17 +05:00
Abdullah Atta f38e61d58f global: update copyright year to 2023 2023-01-16 13:33:47 +05:00
Abdullah Atta a14ccfadce identity: better handling of unregistered users 2023-01-16 13:28:35 +05:00
Abdullah Atta 4e9f82fe48 open source identity server 2022-12-28 17:24:47 +05:00