Commit graph

22 commits

Author SHA1 Message Date
Patrick Britton 95be179a38 security: remove development bypass tokens from production code 2026-02-17 00:52:29 -06:00
Patrick Britton da5984d67c refactor: rename Go module from github.com/patbritton to gitlab.com/patrickbritton3
- Rename module path from github.com/patbritton/sojorn-backend to gitlab.com/patrickbritton3/sojorn/go-backend
- Updated 78 references across 41 files
- Matches new GitLab repository structure
2026-02-16 23:58:39 -06:00
Patrick Britton 96c0348d3a fix: use string literal for SHA-256 algorithm instead of undefined constant 2026-02-16 23:43:38 -06:00
Patrick Britton a5f20439bf fix: correct ALTCHA CreateChallenge API call to use ChallengeOptions struct 2026-02-16 23:42:20 -06:00
Patrick Britton db0e3dfb59 feat: implement official ALTCHA library for proper challenge generation
- Install github.com/altcha-org/altcha-lib-go official library
- Replace custom implementation with official ALTCHA methods
- Use CreateChallenge for proper cryptographic challenges
- Use VerifySolution for proper token verification
- This should fix all ALTCHA verification issues
2026-02-16 23:40:43 -06:00
Patrick Britton 2149a1e001 fix: add development bypass for ALTCHA on admin login
- Allow login in development mode without ALTCHA verification
- Use BYPASS_DEV_MODE token in development
- Keep ALTCHA widget visible but not blocking in dev mode
- This allows testing while we fix the challenge implementation
2026-02-16 23:35:47 -06:00
Patrick Britton 11e8b30122 fix: resolve variable naming conflict in ALTCHA challenge handlers 2026-02-16 23:33:31 -06:00
Patrick Britton 7944380ada fix: implement proper ALTCHA challenge with HMAC signatures
- Use proper cryptographic challenge generation
- Add HMAC-SHA256 signatures for challenge verification
- Replace test signatures with real cryptographic signatures
- This should fix the verification failures
2026-02-16 23:32:02 -06:00
Patrick Britton b6909ffc67 feat: add simple ALTCHA challenge endpoints
- Add GetAltchaChallenge method to both auth and admin handlers
- Simple implementation returning test challenge data
- This should fix the route registration issue
2026-02-16 23:11:54 -06:00
Patrick Britton a3fcfe67ab feat: replace Turnstile with ALTCHA for all authentication
- Add ALTCHA service with challenge generation and verification
- Update auth and admin handlers to use ALTCHA tokens
- Replace Turnstile widget with ALTCHA widget in Flutter app
- Update admin frontend to use ALTCHA token
- Add ALTCHA challenge endpoints for both auth and admin
- Maintain development bypass for testing
- Remove Turnstile dependencies from authentication flow
2026-02-16 22:18:29 -06:00
Patrick Britton cc312c7e9f fix: add development bypass for Turnstile verification
- Add development bypass to Flutter sign_in_screen.dart
- Re-enable Turnstile in admin_handler.go with dev bypass
- Add development bypass to admin login page
- Resolves login issues during development/testing
2026-02-16 22:00:49 -06:00
Patrick Britton c1463256d2 fix: disable turnstile for admin login and troubleshooting 2026-02-16 21:18:05 -06:00
Patrick Britton 1de9997476 feat(auth): Add password reset functionality (backend + app + web) & enhance Turnstile integration 2026-02-16 13:06:00 -06:00
Patrick Britton aec14bc97d Harden admin login Turnstile flow 2026-02-16 12:24:20 -06:00
Patrick Britton e0fd5cea8c Fix Turnstile verification encoding and admin login diagnostics 2026-02-16 12:22:02 -06:00
Patrick Britton e5640ac98c Add image upload functionality to AI moderation testing 2026-02-16 10:13:27 -06:00
Patrick Britton 4fcab45b83 Add Azure OpenAI integration - new service, admin UI, and backend support 2026-02-16 09:25:42 -06:00
Patrick Britton e3a3157f5a Add image downloading and base64 conversion for OpenRouter vision models 2026-02-16 09:13:55 -06:00
Patrick Britton afe34159b5 Add disingenuous political content detection - misleading framing, out-of-context quotes, manipulated imagery 2026-02-16 08:43:09 -06:00
Patrick Britton db0ec65d60 Make political/medical misinformation detection mandatory for all images with step-by-step analysis 2026-02-16 08:40:48 -06:00
Patrick Britton a347ac26a3 Enhance image moderation to detect misinformation in text within images 2026-02-16 08:34:34 -06:00
Patrick Britton 434937961c security: sanitized baseline for public release 2026-02-15 00:33:24 -06:00