Remove cookie-setting from /validate-otk endpoint
Simplification: - /validate-otk endpoint now only returns *** ID and TTL - No longer sets cookies (Next.js handles this directly) - Added getSessionTtlSeconds()...
Make *** cookie client-accessible & validate OTK directly in Next.js
Major Simplifications: - *** cookie is now client-accessible (httpOnly: false) - Both Next.js and Java can read the cookie directly - Cookie expires in 30 minut...
Reduce *** ID length from 512 to 128 characters
Changes: - ***_ID_LENGTH: 512 -> 128 (64 bytes of entropy) - Updated all documentation and comments - Updated logging to show full 128-char ID - OTK length rema...
Fix build error and change *** length to 128 chars
Build Fixes: - Escape apostrophe in validate page (') - Add searchParams dependency to useEffect *** Length Change: - Update expected *** length from 512 ...
Add comprehensive debugging UI to validate page
- Show component render count and validation attempt count - Display OTK information and length validation - Show retrieved *** ID (512 chars) when successful -...
Increase *** ID length to 512 characters for enhanced security
- *** ID: 512-char hex string (256 bytes of secure random data) - OTK ID: 64-char hex string (32 bytes - unchanged) - Updated generateSecureHexString() to accep...
Fix OTK validation duplicate calls issue
- Add useRef to track validation attempts - Prevent duplicate API calls (critical for one-time keys) - Change useEffect deps to empty array (run once on mount) ...
Update OTK validation to use new *** session model
- Extract ***Id from JSON response body (not Set-Cookie header) - SecurityService now returns { success, message, ***Id } - Set *** cookie with 64-char GUID fro...
Implement new *** session model with 64-char GUID
- Add KSessionService for simplified session management - *** ID is now a 64-char hex string (not encoded KToken) - Redis key format: ***<64-char-guid> - Redis ...
Update password pepper to match KamoInitializerService - Set pepper to 'f09kf32j0sdfsdfd' to ensure password hashing consistency across services
Password hash generator endpoint for testing/admin - POST **************** to create proper PBKDF2 hashes
Better error handling and logging for API responses - Parse both JSON and text responses with detailed logging
Provide specific error messages for account validation failures - Users now see exact reason **************** instead of generic message
Fix login form encoding from JSON to x-www-form-urlencoded to match SecurityService endpoint
Complete strict TypeScript compliance: added helper functions for type-safe provider processing
Final fix: Replace any types with unknown for strict TypeScript compliance
Remove AuthorizationService dependencies, switch to SecurityService
- Remove complex AuthorizationService authentication logic and domain redirects - Replace OAuth2 provider detection with SecurityService API call - Keep OAuth2 ...
Update workflow to use kamowssecurity-deployment instead of securityservice-deployment
Rename SecurityService deployment from securityservice-deployment to kamowssecurity-deployment
Disable Vault and add required parameters to prevent config validation errors
Fix Redis SSL configuration in k8s ConfigMap - add ssl.enabled property to prevent boolean conversion error
Fix Redis SSL configuration in k8s ConfigMap - change from boolean to object with enabled property
Fix Redis SSL configuration - change from boolean to object with enabled property
Fix Redis configuration
- Remove SSL configuration (was causing type conversion error) - Remove password requirement for local redis-slave service - Set host to **************** (local...
Fix database connection settings
- Update database URL to connect to 10.8.0.1:3306 directly - Change username from root to kamo - Update secret reference from root-password to DB_PASSWORD - Rem...
Fix SecurityService deployment configuration
- Update ConfigMap with complete application.yml including database, Redis, and external service configs - Update Deployment to mount ConfigMap as application.y...
Add Forgejo CI/CD workflow and Kubernetes manifests
- Add **************** for automated build and deployment - Add k8s/ directory with ConfigMap, Deployment, and Service manifests - Update Dockerfile to expose p...
Add checkbox linking feature for preferred names to legal names in profile settings
Remove webpack CSS override that was breaking Tailwind CSS processing
Add missing autoprefixer to PostCSS config - fixes CSS rendering issues
Replace Tailwind v4 with v3 - remove @tailwindcss/postcss, add tailwindcss v3
Fix PostCSS config to use standard Tailwind plugin instead of v4 plugin
Add K2M1 TCP connectivity pre-check with retries
Before attempting kubectl operations, verify TCP connection to 10.8.2.1:6443 - Tests TCP connection 3 times with 5 second delays between attempts - Provides cle...
Like what you see shipping?
All of it arrives in your workspace on its own. Start on the free plan and read this page again in a month.