- Shipped
- 15 Novemba 2026, 10:27 UTC
- Author
- Kamo
- Commit
- adc476b
ID5.6 — / auth / kuanza anakubali portal (BORROWER | MGONJWA) + portalHost (+ watazamaji = MTUmiaji, kuhusiana ijayo), hupita yao kwa shirikisho / kuanza na inawaweka katika kamo_fed_ctx kote ID1.4b hop; malformed jozi ni kukataliwa kabla yoyote mtoa (BAD_PORTAL kadi). Callback / kiungo-kuthibitisha: PORTAL -> 303 kwa returnUrl tu wakati ni https juu ya hasa portal mwenyeji mtiririko kuanza na; PORTAL_MFA -> MfaStep zilizopo posting kwa relay mpya /api/federation/portal-mfa -> federation/portal/mfa (portal mwenyeji uliofanyika server- upande katika HttpOnly kamo_portal); ERROR kubeba returnUrl juu ya mkondo portal -> nyuma ya portal. mkondo portal kamwe mimea *** . @kamo/auth 0.6.1 ramani matokeo yasiyojulikana kwa ERROR, hivyo njia kusoma jibu kavu kwanza (lib/signin/portal.mjs) na vinginevyo njia hasa kama awali. ID5.7 — kamo_did (HttpOnly, salama, Lax, 400 siku, 32 bytes random) minted wakati kuwepo na kutumwa kama X-Kamo-Kifaa-Id juu ya kila kuingia-katika relay (login, mfa, kuchagua, shirikisho kuanza / callback / kiungo, passwordless, passkeys, SSO / SAML; kamwe minted juu ya msalaba-tovuti fomu POST). PASSKEY_REQUIRED kutoka / api / kuingia, MFA, kuchagua, shirikisho na passwordless majibu inafungua "Shirika lako Anataka Wasimamizi Kutumia Passkey": Kutumia yako Passkey / Kujenga Passkey Sasa **************** / Kuendelea Kwa Sasa (tu wakati canContinue), kisha kawaida mkono-off. Breached-password nudge baada ya PASSWORD kujiandikisha katika (SHA-1 katika kivinjari, 5-hex prefix kwa /api/pwned na Ongeza-Padding + 1.5 s, kushindwa-mzima) na mabadiliko Yake Sasa / Kukumbusha Mimi Baadaye na moto-na-kusahau signin / kuvunja-nudge na kupanda ***. mpya / salama-akaunti? t = ukurasa. kadi kukataa kwa PASSWORD_RESET_REQUIRED (na Reset Password yangu), STAFF_ACCOUNT, BAD_PORTAL, NO_PORTAL_ACCOUNT. Kila tawi jipya ni hatari wakati securityservice haina kujibu (404/unknown -> tabia ya leo). Kuthibitishwa: npm mtihani 134/134 (31 mpya), tsc safi, kuangalia-i18n-kifungo dhidi ya kamusi kushinikiza, risasi harness.