4 Commits

Include renames

Author	SHA1	Message	Date
Aditya Tripathi	7bed78c81e	feat(auth): add passkey sign-in ... Enable Fortify passkeys (laravel/passkeys) with the @laravel/passkeys client. Users can sign in with a passkey, confirm sensitive actions with one, and add, rename, and delete passkeys on the Profile page. - Resolve the relying party for each request from the instance URL, then APP_URL, then localhost. Passkey routes return 404 on other hosts. - Add the is_passkey_enabled instance setting (Settings > Advanced). - Use a hex user handle (laravel/passkeys-server#41). - Rate limit the passkey routes by client IP. - Record audit events for registered, verified, and deleted passkeys.	2026-10-13 04:01:40 +00:00
Andras Bacsai	4f8bf46feb	fix(auth): remove the unused Fortify profile route that bypassed the SSO email lock ... PUT /user/profile-information changed the email with no SSO check and no verification. The profile page has its own verified email change, so the Fortify feature, its action and its binding are removed.	2026-09-30 18:10:18 +02:00
Andras Bacsai	f8d7c5209e	rate limit things	2023-08-15 14:27:45 +02:00
Andras Bacsai	e47d493776	Add users, teams, authentication, profile/login/register/navbar views	2023-03-24 14:54:17 +01:00