4 Commits

Include renames

Author	SHA1	Message	Date
thepraandClaude Opus 5.5	ab17959ed4	R9 Web Push in decePub: one subscription per persona, each with its own token and registration ... Settings gets "Notifications on this device" (PushEditor): personas, alerts in four groups, policy, a test notification, after a one-time notice of what the push service learns. Each persona ticked gets its own service worker registration (push-worker.js at push/{slot}/), so its own endpoint and keys, subscribed with its own token (IHttpService's *As); nothing PrivaPub stores ties two personas together and the worker never reads the payload's token. PushService follows the tokens (re-subscribing after a renewal), reconciles at every session start, turns off before sign-out and drops deleted or suspended personas. A click opens that persona's notifications; the app badge counts the unread ones. Exchanges now ask for the push scope. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01WpVCoDeM1qUTRp4fXQdfof	2026-10-18 09:50:46 +02:00
thepraandClaude Opus 5.5	b731d8c8c0	R3 two-factor in decePub: an authenticator app set up in Settings, its code asked for at sign-in ... Completion program R3, with PrivaPub's TOTP routes of the same release. - Settings, the login: TotpEditor turns two-factor sign-in on (the password, then the QR code, the secret and the otpauth:// link, then the app's first code; the ten recovery codes shown once with Copy), shows how many recovery codes are left (warned at three), and turns it off with the password and a code, asked first. - Turning it on, like a password change, ends every other session: AuthService.ContinueSession takes the new JWT and exchanges the persona's token again. - Sign-in: PrivaPub's 428 keeps the name and password and asks for the six digits (DOtp), or a recovery code instead; a wrong code says so; Back returns to the password. - window.copyText (main.js) through AppStatusService.CopyText. - 29 keys in both resx files; CLAUDE.md follows. Verified: dotnet build decePubClient.csproj -c Release (0 errors, no new warnings). Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01WpVCoDeM1qUTRp4fXQdfof	2026-10-17 03:33:46 +02:00
thepraandClaude Opus 5.5	7d4b35f0d7	R2 accounts in decePub: forgotten password, email by code, sessions, the theme kept with the login ... Completion program R2, with PrivaPub's routes of the same release. - Pages/PasswordRecovery.razor (/password-recovery): asks for a login or an address and shows the server's one sentence; with ?rc= it takes the code out of the address bar at once, checks it and sets a new password. Login links there ("Forgot your password?"). - Settings, the login: its email address with a verified badge, changed with the password and the code emailed to it (DOtp), removed with the password; "Sign out everywhere" (every device and persona, asked first). - A password change takes the new JWT PrivaPub answers and exchanges the persona's token again, since every persona token ended with it. - The theme kept with the login (PageSettings.SyncWithLogin, Settings > General): taken at sign-in and start-up once a client saved it, saved 1.5 s after a change here, never posted back when nothing changed, never the language. - Login, Setup and Join start the session through CascadingState.SignedIn, which takes the login's theme. - 38 keys in both resx files; CLAUDE.md follows. Verified: dotnet build decePubClient.csproj -c Release (0 errors, no new warnings). Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01WpVCoDeM1qUTRp4fXQdfof	2026-10-17 03:21:59 +02:00
thepraandClaude Opus 5.5	228708c328	Settings: change the login's password, or delete the login ... A Login section in Settings changes the root's password (the current one given) and deletes the whole login, every persona with it, after its password and an explicit "I understand"; the client then signs out. Both use PrivaPub's existing /clientapi/user routes. The e2e signs up a login of its own, changes its password and deletes it, checking each against PrivaPub's login. Signing in now waits for either the feed or an enabled persona chooser, so a login with one persona (which goes on by itself) and a new persona's empty feed both sign in. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01LsXgEaXee4GCU1hwYgPJXw	2026-10-05 18:32:47 +02:00