null/BillTracker
null
/
BillTracker
1
0
Fork 0
Code Issues 4 Pull Requests Packages Projects Releases 1 Wiki Activity
BillTracker/services
History
null 88a32a983f feat(auth): passkey / security-key UI — WebAuthn ships end to end 
The backend existed since 99abca9 with no way to reach it (QA-B1-01).
Now wired:

- LoginPage: requires_webauthn second step mirrors TOTP — the key prompt
  fires automatically after the password; cancel/retry + back-to-sign-in
- ProfilePage: PasskeySection (mirrors TotpSection) — enroll with a name,
  list keys, password-gated per-key remove + remove-all
- webauthnService: WEBAUTHN_ORIGIN stays authoritative; otherwise accept
  the browser's origin when its hostname equals the RP ID — fixes real
  dev/e2e enrollment where the Vite UI port differs from the API port
  (the browser already enforces RP ID ⊆ origin, so no widened trust)
- Deploy safety: WEBAUTHN_RP_ID documented in .env.example + a boot-time
  prod warning in utils/env.cts (localhost-bound keys silently fail
  behind a real domain)
- e2e/webauthn.probe.spec.js: CDP virtual authenticator drives the full
  lifecycle (enroll -> key sign-in -> password-gated removal), retiring
  Cycle 1's 'needs a human with a key' assumption. Probe suite 18/18.

Server 252/252, client 52/52, typecheck + build clean.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
 		2026-07-10 17:30:14 -05:00
..
advisoryFilterService.cts style: apply Prettier across client + server (no behavior change) 2026-07-06 14:23:53 -05:00
amountSuggestionService.cts style: apply Prettier across client + server (no behavior change) 2026-07-06 14:23:53 -05:00
analyticsService.cts style: apply Prettier across client + server (no behavior change) 2026-07-06 14:23:53 -05:00
aprService.cts style: apply Prettier across client + server (no behavior change) 2026-07-06 14:23:53 -05:00
auditService.cts feat(logging): redacted, level-gated logger; migrate all server console.* (Pillar D) 2026-07-06 16:05:18 -05:00
authService.cts fix(auth): handle requires_webauthn in POST /login — was a 500 self-lockout 2026-07-10 16:29:08 -05:00
backupScheduler.cts feat(logging): redacted, level-gated logger; migrate all server console.* (Pillar D) 2026-07-06 16:05:18 -05:00
backupService.cts style: apply Prettier across client + server (no behavior change) 2026-07-06 14:23:53 -05:00
bankSyncConfigService.cts style: apply Prettier across client + server (no behavior change) 2026-07-06 14:23:53 -05:00
bankSyncService.cts feat(logging): redacted, level-gated logger; migrate all server console.* (Pillar D) 2026-07-06 16:05:18 -05:00
bankSyncWorker.cts feat(logging): redacted, level-gated logger; migrate all server console.* (Pillar D) 2026-07-06 16:05:18 -05:00
billMerchantRuleService.cts feat(logging): redacted, level-gated logger; migrate all server console.* (Pillar D) 2026-07-06 16:05:18 -05:00
billsService.cts style: apply Prettier across client + server (no behavior change) 2026-07-06 14:23:53 -05:00
calendarFeedService.cts style: apply Prettier across client + server (no behavior change) 2026-07-06 14:23:53 -05:00
cleanupService.cts feat(logging): redacted, level-gated logger; migrate all server console.* (Pillar D) 2026-07-06 16:05:18 -05:00
csvTransactionImportService.cts style: apply Prettier across client + server (no behavior change) 2026-07-06 14:23:53 -05:00
driftService.cts feat(logging): redacted, level-gated logger; migrate all server console.* (Pillar D) 2026-07-06 16:05:18 -05:00
encryptionService.cts feat(logging): redacted, level-gated logger; migrate all server console.* (Pillar D) 2026-07-06 16:05:18 -05:00
loginFingerprint.cts style: apply Prettier across client + server (no behavior change) 2026-07-06 14:23:53 -05:00
matchSuggestionService.cts style: apply Prettier across client + server (no behavior change) 2026-07-06 14:23:53 -05:00
merchantStoreMatchService.cts style: apply Prettier across client + server (no behavior change) 2026-07-06 14:23:53 -05:00
notificationService.cts feat(logging): redacted, level-gated logger; migrate all server console.* (Pillar D) 2026-07-06 16:05:18 -05:00
ofxImportService.cts style: apply Prettier across client + server (no behavior change) 2026-07-06 14:23:53 -05:00
oidcService.cts feat(logging): redacted, level-gated logger; migrate all server console.* (Pillar D) 2026-07-06 16:05:18 -05:00
paymentAccountingService.cts style: apply Prettier across client + server (no behavior change) 2026-07-06 14:23:53 -05:00
paymentValidation.cts feat(server-ts): paymentValidation → .cts, proving the CJS-module path (Phase 2) 2026-07-05 13:51:37 -05:00
simplefinService.cts style: apply Prettier across client + server (no behavior change) 2026-07-06 14:23:53 -05:00
snowballService.cts style: apply Prettier across client + server (no behavior change) 2026-07-06 14:23:53 -05:00
spendingService.cts feat(logging): redacted, level-gated logger; migrate all server console.* (Pillar D) 2026-07-06 16:05:18 -05:00
spreadsheetImportService.cts feat(logging): redacted, level-gated logger; migrate all server console.* (Pillar D) 2026-07-06 16:05:18 -05:00
statusRuntime.cts style: apply Prettier across client + server (no behavior change) 2026-07-06 14:23:53 -05:00
statusService.cts style: apply Prettier across client + server (no behavior change) 2026-07-06 14:23:53 -05:00
subscriptionService.cts style: apply Prettier across client + server (no behavior change) 2026-07-06 14:23:53 -05:00
totpService.cts style: apply Prettier across client + server (no behavior change) 2026-07-06 14:23:53 -05:00
trackerService.cts feat(logging): redacted, level-gated logger; migrate all server console.* (Pillar D) 2026-07-06 16:05:18 -05:00
transactionMatchService.cts style: apply Prettier across client + server (no behavior change) 2026-07-06 14:23:53 -05:00
transactionMatchState.cts style: apply Prettier across client + server (no behavior change) 2026-07-06 14:23:53 -05:00
transactionService.cts style: apply Prettier across client + server (no behavior change) 2026-07-06 14:23:53 -05:00
updateCheckService.cts style: apply Prettier across client + server (no behavior change) 2026-07-06 14:23:53 -05:00
userDataService.cts style: apply Prettier across client + server (no behavior change) 2026-07-06 14:23:53 -05:00
userDbImportService.cts style: apply Prettier across client + server (no behavior change) 2026-07-06 14:23:53 -05:00
userSettings.cts style: apply Prettier across client + server (no behavior change) 2026-07-06 14:23:53 -05:00
webauthnService.cts feat(auth): passkey / security-key UI — WebAuthn ships end to end 2026-07-10 17:30:14 -05:00