6 Commits

Author	SHA1	Message	Date
hsiegeln	17ba02c30d	feat: add WebAuthn Experience API functions to sign-in UI ... Adds startWebAuthnAuth and verifyWebAuthnAuth functions that call the Logto Experience API WebAuthn endpoints for passkey MFA verification. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-04-27 08:55:10 +02:00
hsiegeln	988035b952	fix: handle MFA binding skip during registration submit ... The registration flow hit a 422 on /api/experience/submit when MFA policy is UserControlled. Adds the same trySubmit + skipMfaBinding pattern already used in the sign-in flow — Logto confirms mfa-skipped works for both SignIn and Register interaction events. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-26 15:52:46 +02:00
hsiegeln	6e6e4218c9	fix: skip MFA binding prompt for UserControlled policy during sign-in ... Logto returns 422 with an MFA recommendation when policy is UserControlled. Call POST /profile/mfa/mfa-skipped to skip the binding prompt, then re-submit. Users who already have MFA enrolled still get the TOTP verification flow. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-26 14:43:55 +02:00
hsiegeln	08a3ad03b7	feat: add forgot-password and MFA verification Experience API functions ... Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-04-26 13:39:31 +02:00
hsiegeln	9ed2cedc98	feat: self-service sign-up with email verification and onboarding ... Complete sign-up pipeline: email registration via Logto Experience API, SMTP email verification, and self-service trial tenant creation. Layer 1 — Logto config: - Bootstrap Phase 8b: SMTP email connector with branded HTML templates - Bootstrap Phase 8c: enable SignInAndRegister (email+password sign-up) - Dockerfile installs official Logto connectors (ensures SMTP available) - SMTP env vars in docker-compose, installer templates, .env.example Layer 2 — Experience API (ui/sign-in/experience-api.ts): - Registration flow: initRegistration → sendVerificationCode → verifyCode → addProfile (password) → identifyUser → submit - Sign-in auto-detects email vs username identifier Layer 3 — Custom sign-in UI (ui/sign-in/SignInPage.tsx): - Three-mode state machine: signIn / register / verifyCode - Reads first_screen=register from URL query params - Toggle links between sign-in and register views Layer 4 — Post-registration onboarding: - OnboardingService: reuses VendorTenantService.createAndProvision(), adds calling user to Logto org as owner, enforces one trial per user - OnboardingController: POST /api/onboarding/tenant (authenticated only) - OnboardingPage.tsx: org name + auto-slug form - LandingRedirect: detects zero orgs → redirects to /onboarding - RegisterPage.tsx: /platform/register initiates OIDC with firstScreen Installers (install.sh + install.ps1): - Both prompt for SMTP config in SaaS mode - CLI args, env var capture, cameleer.conf persistence Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-25 00:21:07 +02:00
hsiegeln	df220bc5f3	feat: custom Logto sign-in UI with Cameleer branding ... Replace Logto's default sign-in page with a custom React SPA that matches the cameleer3-server login page using @cameleer/design-system. - New Vite+React app at ui/sign-in/ with Experience API integration - 4-step auth flow: init → verify password → identify → submit - Design-system components: Card, Input, Button, FormField, Alert - Same witty random subtitles as cameleer3-server LoginPage - Dockerfile: add sign-in-frontend build stage, copy dist to image - docker-compose: CUSTOM_UI_PATH on Logto, shared signinui volume - SaaS entrypoint copies sign-in dist to shared volume on startup - Add .gitattributes for LF line endings Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-06 11:43:22 +02:00