Johan Lundberg
71ddf5d8ff
feat(e2e): add WebAuthn E2E tests with CDP virtual authenticator
2026-02-18 11:52:47 +01:00
Johan Lundberg
c96ebe1b64
feat(e2e): add WebAuthn test user to fixture seeding
2026-02-18 11:47:11 +01:00
Johan Lundberg
ef8bf10555
refactor(e2e): remove old custom test runner
2026-02-18 11:43:17 +01:00
Johan Lundberg
7900f264ba
refactor(e2e): migrate all tests to Playwright Test
2026-02-18 11:37:23 +01:00
Johan Lundberg
174c6c001e
feat: migrate e2e test infrastructure to @playwright/test
...
Replace direct playwright dependency with @playwright/test and add
playwright.config.js for centralized test configuration. Update run.sh
to invoke 'npx playwright test' instead of running test files with node.
2026-02-18 11:10:23 +01:00
Johan Lundberg
cd9469342b
refactor: fix lint warnings in webauthn login tests
2026-02-17 13:46:02 +01:00
Johan Lundberg
32567b5484
feat: rewrite WebAuthn login routes for usernameless discoverable credential flow
2026-02-17 13:38:17 +01:00
Johan Lundberg
2ffe968342
feat: require discoverable credentials and prefer user verification in WebAuthnService
2026-02-17 13:18:46 +01:00
Johan Lundberg
51d03bc780
refactor: extract open_db() context manager from lifespan
2026-02-16 15:41:15 +01:00
Johan Lundberg
7cb1adbd06
update all imports in test files: fastapi_oidc_op → porchlight
2026-02-16 15:34:53 +01:00
Johan Lundberg
c5a80b51de
rename package directory fastapi_oidc_op → porchlight
2026-02-16 15:29:31 +01:00
Johan Lundberg
c381896de4
test: add comprehensive e2e test suite with shared helpers and DB seeding
...
Extract shared test runner (helpers.js), add file-based SQLite with
setup_db.py for fixture seeding, and add tests for auth guard, credentials
management, full registration flow, health endpoint, password auth, and
magic link registration errors. 66 checks across 7 test files.
2026-02-16 14:41:14 +01:00
Johan Lundberg
dbd7449ea1
test: add end-to-end OIDC authorization code flow test
2026-02-16 14:05:11 +01:00
Johan Lundberg
11a76d4ea8
feat: add OIDC userinfo endpoint
2026-02-16 13:57:10 +01:00
Johan Lundberg
e4e7cd237e
feat: add authorization complete and token endpoints
2026-02-16 13:47:48 +01:00
Johan Lundberg
18e9e7f2b5
feat: redirect to OIDC authorization after login when pending
2026-02-16 13:34:06 +01:00
Johan Lundberg
d8c891af89
feat: add OIDC discovery, JWKS, and authorization endpoints
2026-02-16 13:33:40 +01:00
Johan Lundberg
95d184ce0f
feat: integrate idpyoidc server into app lifespan
2026-02-16 13:29:39 +01:00
Johan Lundberg
2426e0675c
feat: add idpyoidc server initialization
2026-02-16 13:24:54 +01:00
Johan Lundberg
02b75a3eca
feat: add OIDC claims mapping and PorchlightUserInfo source
2026-02-16 12:52:43 +01:00
Johan Lundberg
e8fd7eb01d
test: add end-to-end browser tests with Playwright
...
Set up tests/e2e/ with a login page test covering branding, accessibility,
form structure, theme colors, and static asset serving. Includes run.sh
that manages the app lifecycle (start, test, stop) automatically.
2026-02-16 12:22:58 +01:00
Johan Lundberg
84e61464c7
feat: add Porchlight branding with logo, favicon, and redesigned CSS theme
...
Rebrand from FastAPI OIDC OP to Porchlight with warm amber/gold identity:
- Add doorway-with-light SVG logo and 32x32 PNG favicon
- Rewrite style.css with full design system (color tokens, spacing scale,
typography scale, section cards, button variants, dark mode)
- Update base template with site header, logo, and favicon
- Update all page titles and FastAPI app title to Porchlight
2026-02-16 12:08:19 +01:00
Johan Lundberg
e15dcc4745
feat: add authentication routes with session login, WebAuthn, and credential management
...
Implement Phase 4 auth routes: password login/logout, WebAuthn
registration and authentication, magic link registration, and
credential management pages with HTMX. Includes session middleware,
Jinja2 templates, vendored HTMX, and last-credential guardrails.
120 tests passing.
2026-02-16 11:39:50 +01:00
Johan Lundberg
4774ae3c2f
feat: add MagicLinkService with token create/validate/cleanup
2026-02-13 15:02:53 +01:00
Johan Lundberg
872001c6de
feat: add WebAuthnService with fido2 registration and authentication
2026-02-13 14:48:38 +01:00
Johan Lundberg
e6f5ea7f0c
feat: add PasswordService with argon2 hash/verify
2026-02-13 14:35:32 +01:00
Johan Lundberg
a45604ff2f
feat: add lifespan integration and dependency injection
2026-02-13 13:59:59 +01:00
Johan Lundberg
9f4914a922
feat: add SQLiteMagicLinkRepository with tests
2026-02-13 13:53:14 +01:00
Johan Lundberg
bbe0dac8cb
feat: add SQLiteCredentialRepository with tests
2026-02-13 13:49:25 +01:00
Johan Lundberg
d941209f1e
feat: add SQLiteUserRepository with tests
2026-02-13 13:36:38 +01:00
Johan Lundberg
6c4ba79eed
feat: add DuplicateError domain exception
2026-02-13 13:14:01 +01:00
Johan Lundberg
627675fff1
feat: add SQLite migration runner
2026-02-13 13:08:44 +01:00
Johan Lundberg
9d7a67b2d2
fix: add collision retry for userid generation
2026-02-12 15:34:31 +01:00
Johan Lundberg
e4e484dc4b
fix: make MagicLink.expires_at required, document validation test TODOs
2026-02-12 15:33:08 +01:00
Johan Lundberg
6a8b41cd38
feat: add app factory with health endpoint and test infrastructure
2026-02-12 15:09:27 +01:00
Johan Lundberg
fd8c8cbf39
feat: add repository Protocol interfaces for User, Credential, MagicLink
2026-02-12 14:56:20 +01:00
Johan Lundberg
b22325588a
feat: add proquint-based userid generation
2026-02-12 14:56:10 +01:00
Johan Lundberg
e5220c97b1
feat: add Pydantic models for User, Credential, and MagicLink
2026-02-12 14:50:32 +01:00
Johan Lundberg
16a78663f3
feat: add configuration module with env-based settings
2026-02-12 14:42:26 +01:00
Johan Lundberg
922851b966
chore: create package structure with src layout
2026-02-12 14:39:07 +01:00
