owncast/core
Gabe Kangas b835de2dc4
IndieAuth support (#1811)
* Able to authenticate user against IndieAuth. For #1273

* WIP server indieauth endpoint. For https://github.com/owncast/owncast/issues/1272

* Add migration to remove access tokens from user

* Add authenticated bool to user for display purposes

* Add indieauth modal and auth flair to display names. For #1273

* Validate URLs and display errors

* Renames, cleanups

* Handle relative auth endpoint paths. Add error handling for missing redirects.

* Disallow using display names in use by registered users. Closes #1810

* Verify code verifier via code challenge on callback

* Use relative path to authorization_endpoint

* Post-rebase fixes

* Use a timestamp instead of a bool for authenticated

* Propertly handle and display error in modal

* Use auth'ed timestamp to derive authenticated flag to display in chat

* don't redirect unless a URL is present

avoids redirecting to `undefined` if there was an error

* improve error message if owncast server URL isn't set

* fix IndieAuth PKCE implementation

use SHA256 instead of SHA1, generates a longer code verifier (must be 43-128 chars long), fixes URL-safe SHA256 encoding

* return real profile data for IndieAuth response

* check the code verifier in the IndieAuth server

* Linting

* Add new chat settings modal anad split up indieauth ui

* Remove logging error

* Update the IndieAuth modal UI. For #1273

* Add IndieAuth repsonse error checking

* Disable IndieAuth client if server URL is not set.

* Add explicit error messages for specific error types

* Fix bad logic

* Return OAuth-keyed error responses for indieauth server

* Display IndieAuth error in plain text with link to return to main page

* Remove redundant check

* Add additional detail to error

* Hide IndieAuth details behind disclosure details

* Break out migration into two steps because some people have been runing dev in production

* Add auth option to user dropdown

Co-authored-by: Aaron Parecki <aaron@parecki.com>
2022-04-21 14:55:26 -07:00
..
chat IndieAuth support (#1811) 2022-04-21 14:55:26 -07:00
data IndieAuth support (#1811) 2022-04-21 14:55:26 -07:00
playlist Add support for IP-based bans (#1703) 2022-03-06 20:34:49 -08:00
rtmp Optimise regexp usage (#1502) 2021-10-29 12:29:01 -07:00
storageproviders Remove unnecessary var data in log messages. Closes #1640 2022-02-25 15:22:52 -08:00
transcoder Add videotoolbox codec (#1771) 2022-03-15 00:55:06 -07:00
user IndieAuth support (#1811) 2022-04-21 14:55:26 -07:00
webhooks use worker pool to limit webhooks to 10 concurrent http executions (#1510) (#1525) 2021-11-14 10:02:52 -08:00
core.go IndieAuth support (#1811) 2022-04-21 14:55:26 -07:00
offlineState.go Fix "invalid cross-device link" error when running on a different filesystem (#1769) 2022-03-07 16:30:40 -08:00
stats.go Add support for active viewer details API. Closes #1477 (#1747) 2022-03-06 17:31:47 -08:00
status.go Expanded linting + fix warnings (#1396) 2021-09-12 00:18:15 -07:00
storage.go remove global variables from core/storageproviders (#1444) 2021-10-11 16:29:36 -07:00
streamState.go Outbound live stream notifications (#1663) 2022-03-18 13:33:23 -07:00