graham/towerops
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
922 commits 1 branch 0 tags 50 MiB
Commit graph

8 commits

Author SHA1 Message Date
mayor
74c5c543c0
docs: add detailed implementation plan for job monitoring dashboard 2026-02-06 16:07:44 -06:00
Graham McIntire
1a054fd598
make sites optional 2026-02-04 13:05:32 -06:00
Graham McIntire
6c8e670dae
docs: add gettext internationalization design 
- Add comprehensive i18n design document with domain-based organization
  (default, errors, auth, equipment, admin, emails domains)
- Document helper functions, implementation patterns, and migration workflow
- Fix multiple test suite issues:
  * user_settings_live_test.exs: Update all tests to match current UI structure
    - Fix user.name references (use first_name/last_name)
    - Fix TOTP device creation (use create_totp_device/2)
    - Update tab URLs and form IDs
    - Update tab names (Account, API, Notifications)
    - Remove obsolete tabs (Organizations, Activity)
    - Fix password tests (pattern match redirect without flash token)
    - Update sudo mode behavior
  * account_data_controller_test.exs: Fix user profile assertions
  * rate_limit_test.exs: Fix unused variable warning
  * settings_live_test.exs: Fix organization form validation test
 2026-02-02 09:33:01 -06:00
Graham McIntire
264154a3d8
feat: implement sudo mode MFA-only verification controller 
- Add UserSudoController with GET and POST /users/sudo/verify routes
- Create verify.html.heex template for TOTP verification form
- Only accept TOTP codes (6 numeric digits), reject recovery codes
- Update grant_sudo_mode to set authenticated_at virtual field
- Exclude /users/sudo paths from return_to overwriting
- Add comprehensive controller tests (12 test cases)
- Verify redirect behavior, error handling, and session management

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
 2026-02-01 14:34:17 -06:00
Graham McIntire
303196bb8e
Add design doc for sudo mode MFA-only verification 2026-02-01 13:50:34 -06:00
Graham McIntire
77e62df9da
Move CaptureTimezone plug to browser pipeline 
The plug was incorrectly placed in the endpoint, causing it to run on
all requests including APIs. Moved to :browser pipeline where it belongs,
and removed redundant fetch_session call since the pipeline handles it.
 2026-02-01 11:15:51 -06:00
Graham McIntire
45f8bc7459
Add design for Cloudflare timezone detection on signup 
Documents approach to automatically populate user timezone from cf-timezone
header during registration, with UTC fallback when header is not present.
 2026-02-01 10:56:07 -06:00
Graham McIntire
43fe8cd326
Add design document for HIBP password breach checking 2026-01-31 17:16:58 -06:00