Youthacks auth

oopsie forgot to devlog…

• added creating/updating app info
• some other backend database work

buttons and inputs look a little more consistent now! I also changed some designs for pages, so (for example) the settings page has tabs now

implemented a new elevate flow for sensitive actions, like changing your password or authorising a new application (coming soon)

changelog:

• new ‘elevate attempts’ table for storing re-authenticate challenges
• if you try to do a sensitive action, it saves what you tried to do, asks you to re-auth, then applies the action
• if you’ve done a sensitive action recently, it lets you through without re-auth (kinda like github’s sudo mode, not asking for your password too often)
• tells you what you’re approving before you approve it

new elevate flow below w/ changing password

I started this back in October/November, was busy with schoolwork, and am picking it up again now.

changelog:

• switched database ORMs (prisma -> drizzle)
• separated login flow from signup flow to make each section simpler
• new ‘signup attempts’ database table to save in-progress signups (same with logins)
• rewrote most of the backend so I don’t cry (as much) when I look at the code anymore 😓

new flows below (signup, login with one-time code, login with password)