doot.git/internal/auth/auth.go, branch masterdoot — personal productivity web app
https://git.terst.org/doot.git/atom?h=master2026-02-06T01:35:01+00:00Add passkey (WebAuthn) authentication support2026-02-06T01:35:01+00:00Peter Stonethepeterstone@gmail.com2026-02-06T01:35:01+00:00urn:sha1:0a1001eb0bd2d1f7c0624ae1ef8ae7ccdb3447d4
Enable passwordless login via passkeys as an alternative to password auth.
Users register passkeys from Settings; the login page offers both options.
WebAuthn is optional — only active when WEBAUTHN_RP_ID and WEBAUTHN_ORIGIN
env vars are set.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Add session-based authentication2026-01-20T21:34:33+00:00Peter Stonethepeterstone@gmail.com2026-01-20T21:34:33+00:00urn:sha1:08bbcf18b1207153983261652b4a43a9b36f386c
Implement secure authentication using scs session manager with SQLite
backing store and bcrypt password hashing.
- Add users and sessions tables (migration 004)
- Create internal/auth package with Service, Middleware, and Handlers
- Protect all routes except /login, /logout, /static/*
- Add login page template and logout button to dashboard
- Default credentials: admin/changeme (configurable via env vars)
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>