Activity

英国猫咪 gideon

implemented a new elevate flow for sensitive actions, like changing your password or authorising a new application (coming soon)

changelog:

  • new ‘elevate attempts’ table for storing re-authenticate challenges
  • if you try to do a sensitive action, it saves what you tried to do, asks you to re-auth, then applies the action
  • if you’ve done a sensitive action recently, it lets you through without re-auth (kinda like github’s sudo mode, not asking for your password too often)
  • tells you what you’re approving before you approve it

new elevate flow below w/ changing password

Attachment
1

Comments

genr234
genr234 27 days ago

it looks amazing :)

英国猫咪 gideon

I started this back in October/November, was busy with schoolwork, and am picking it up again now.

changelog:

  • switched database ORMs (prisma -> drizzle)
  • separated login flow from signup flow to make each section simpler
  • new ‘signup attempts’ database table to save in-progress signups (same with logins)
  • rewrote most of the backend so I don’t cry (as much) when I look at the code anymore 😓

new flows below (signup, login with one-time code, login with password)

Attachment
Attachment
Attachment
0