3 Commits

Author	SHA1	Message	Date
Mondo Diaz	9e31134785	Add permission-aware upload controls and permission caching ... - Add disabled/disabledReason props to DragDropUpload component - Block drag, drop, and click events when upload is disabled - Add visual disabled state with tooltip explanation - Add permission caching to AuthContext with 5-minute TTL - Clear permission cache on login/logout - Show disabled upload zone for read-only users with explanation	2026-01-12 16:32:39 +00:00
Mondo Diaz	3ebdf51105	Add password change flow and auth error handling ... - Add ChangePasswordPage component for forced password changes - Add RequirePasswordChange wrapper in App.tsx to redirect users - Add custom error classes (UnauthorizedError, ForbiddenError) in api.ts - Add 401/403 error handling in ProjectPage and PackagePage - Add refreshUser function to AuthContext - Add must_change_password field to User type - Add access denied UI for forbidden resources	2026-01-09 13:14:05 -06:00
Mondo Diaz	2a68708a79	Add user authentication system with API key management (#50) ... - Add User, Session, AuthSettings models with bcrypt password hashing - Add auth endpoints: login, logout, change-password, me - Add API key CRUD: create (orch_xxx format), list, revoke - Add admin user management: list, create, update, reset-password - Create default admin user on startup (admin/admin) - Add frontend: Login page, API Keys page, Admin Users page - Add AuthContext for session state management - Add user menu to Layout header with login/logout/settings - Add 15 integration tests for auth system - Add migration 006_auth_tables.sql	2026-01-08 15:01:37 -06:00