10 Commits

Author	SHA1	Message	Date
YuryShkoda	398dfb515c	docs(api): document the current authentication flow, comment non-obvious auth code ... Add a new diagram covering the authentication mechanism: a session-based /SASLogon/login + /SASLogon/authorize handshake that mints a short-lived auth code, exchanged at /SASjsApi/auth/token for a revocable JWT pair, with optional LDAP-backed credential verification. Add WHY comments (not present before) at the handful of spots in the auth code whose behaviour isn't obvious from reading them in isolation: why /auth/token can return an existing token pair instead of rotating it, why the auth-code exchange never checks a client's clientSecret, how verifyTokenInDB turns self-verifying JWTs into revocable ones, why two /SASjsApi/user routes stay reachable in desktop mode, why the static authorized-route list exists on top of plain authentication, and why /SASjsApi/client's real protection lives at its router mount point in routes/api/index.ts rather than in client.ts itself.	2026-07-15 16:34:33 +03:00
sabhas	b3402ea80a	feat: Add /SASjsApi endpoint in permissions	2023-02-06 15:29:24 +05:00
sabhas	5d5a9d3788	fix: update schema of Permission	2022-08-01 21:33:10 +05:00
sabhas	8a3054e19a	fix: show non-admin user his own permissions only	2022-07-30 00:01:15 +05:00
sabhas	03cb89d14f	chore: code fixes	2022-07-21 23:03:40 +05:00
sabhas	a10b87930c	chore: quick fix	2022-07-05 15:29:44 +05:00
Saad Jutt	1108d3dd7b	chore: quick fix	2022-07-05 05:30:13 +05:00
Saad Jutt	451cb4f6dd	chore: fixed specs	2022-07-05 03:26:37 +05:00
Saad Jutt	0b759a5594	chore: code fixes API + web	2022-07-05 02:34:33 +05:00
sabhas	b10e932605	feat: added get authorizedRoutes api endpoint	2022-07-04 19:14:06 +05:00