Repository navigation

Feat/anomaly detection - #13

Merged

raymondproguy merged 208 commits into

mainfrom

feat/anomaly-detection

Sep 13, 2026

Merged

Feat/anomaly detection#13
raymondproguy merged 208 commits into
mainfrom
feat/anomaly-detection

Commits on Mar 9, 2026
- docs: Improve formatting of roadmap in README.md
  raymondproguy
  authored
  a54c24c
- ci: add release automation
  raymondproguy
  authored
  68c19b6
- ci: fix test path to internal/tests
  raymondproguy
  committed
  12653c2
- ci: add release workflow
  raymondproguy
  committed
  fa9fbd4
- fix: add root package for correct imports
  raymondproguy
  committed
  12beff3
- docs: add better test examples
  raymondproguy
  committed
  c0c8dda
- fix: remove old faced directory
  raymondproguy
  committed
  cb647a4
- ci: fix release workflow for public repo
  raymondproguy
  committed
  2c37cc2
- fix: add root package file
  raymondproguy
  committed
  db18422
- Add permissions for contents write access
  raymondproguy
  authored
  fdf4469
- Fix import statement formatting in main.go
  raymondproguy
  authored
  852cf63
- Fix import statement formatting in main.go
  raymondproguy
  authored
  5fab527
- Update release.yml
  raymondproguy
  authored
  eed5389
Commits on Mar 10, 2026
- docs: Add under the hood for crydensync
  raymondproguy
  committed
  962f18f
- docs: remove duplicate notes
  raymondproguy
  committed
  f3f2731
- docs: Fixed link typo
  raymondproguy
  committed
  818255d
Commits on Mar 24, 2026
- feat: Update session with hash and lookup for tokens
  raymondproguy
  committed
  9cf05b0
- feat: Update session interface with hash and lookup for tokens
  raymondproguy
  committed
  e6e3b2f
- feat: new session store with hash and lookup for tokens
  raymondproguy
  committed
  5f14089
- feat: update session memory store with hash and lookup for tokens
  raymondproguy
  committed
  c00651e
- feat: service for hash and lookup for tokens
  raymondproguy
  committed
  9025d3c
- feat: Upadate sqlite schemas with new token hash
  raymondproguy
  committed
  b22c91d
- feat: Upadte engine with new token hash
  raymondproguy
  committed
  309da93
- test: Test for token hashing
  raymondproguy
  committed
  a99b5c5
- feat: Session mongodb storage implementation
  raymondproguy
  committed
  eeb7ac0
- feat: Session postgre sql storage implementation
  raymondproguy
  committed
  00f7ba2
- fix: Update session postgre sql auto migration
  raymondproguy
  committed
  488ac60
Commits on Mar 25, 2026
- feat: Add postgres and mongodb method to faced cryden.go file"
  raymondproguy
  committed
  1ec80d0
- fix: Fixed typo in session store and add getDB method for sqlite
  raymondproguy
  committed
  e7421df
- fix: Fixed typo in memory session store
  raymondproguy
  committed
  4aff200
- fix: Fixed rate limit reset in login func
  raymondproguy
  committed
  efd97da
- fix: Fix typo, and used getDB in faced cryden.go file
  raymondproguy
  committed
  0494528
- fix: Fixed password validation
  raymondproguy
  committed
  9eadb04
- fix: Fixed allow func typos and reset limit
  raymondproguy
  committed
  b4f8e6f
- feat: add close() method
  raymondproguy
  committed
  9767faa
- fix: Fixed rate limit in login func
  raymondproguy
  committed
  c36409a
- feat: New generate secure ID to randomize ID's
  raymondproguy
  committed
  b6c4ead
- feat: Add basic Close() for memory stores
  raymondproguy
  committed
  8b81228
- feat: Add Close() func to cancel db conections in sqlite
  raymondproguy
  committed
  0cc9f82
- feat: Add Close() func to cancel db conections in postgre sql and mongo db
  raymondproguy
  committed
  186fb15
Commits on Apr 3, 2026
- fix: Fixed typo in token hashing test and also in cryden faced
  raymondproguy
  committed
  3fb33ba
- refactor: Refactor package core auth section and clear engine file
  raymondproguy
  committed
  3b0d8e5
Commits on Apr 4, 2026
- refactor: split engine.go into auth, user, session files
  raymondproguy
  committed
  7ae34b5
- feat: add file audit logger with JSON output and rotation support
  raymondproguy
  committed
  bcc98e6
- test: Added file logger test
  raymondproguy
  committed
  a2b5390
Commits on Apr 5, 2026
- fixed typos and import path
  raymondproguy
  committed
  b52f068
- feat: Device tracking implementation
  raymondproguy
  committed
  f2bf08f
- feat: Add device tracking to cryden faced, add data to memory stores
  raymondproguy
  committed
  8dfd3c9
- test: Device tracking tests
  raymondproguy
  committed
  b4f79b9
- feat: Update all stores with device tracking, tanles and migration
  raymondproguy
  committed
  f4be302
Commits on Jul 26, 2026
Commits on Jul 27, 2026
Commits on Jul 28, 2026
Commits on Aug 9, 2026
- feat: email delivery for verification, no imlm in v2
  raymondproguy02
  committed
  73be7c5
- feat(auth): signup and it's test
  raymondproguy02
  committed
  89f75ea
- feat(auth): login and it's login_test
  raymondproguy02
  committed
  5a6d778
- feat(auth): user account and test
  raymondproguy02
  committed
  59d3f78
- feat(auth): email feature, verify and test
  raymondproguy02
  committed
  eda74ae
- feat(auth): sentinel error, logout and test
  raymondproguy02
  committed
  b970a96
- feat: token refresh or access
  raymondproguy02
  committed
  483e064
Commits on Aug 10, 2026
Commits on Aug 11, 2026
- feat: Public facade and configs, wrapping up
  raymondproguy02
  committed
  57c1af3
- fix: typo in config test file
  raymondproguy02
  committed
  5618240
- docs: Readme contributing security code-of-conduct docs
  raymondproguy02
  committed
  b1b354c
- Merge pull request #2 from crydensync/crydenv2
  raymondproguy02
  authored
  2ae8100
- format codebase with gofmt
  raymondproguy02
  committed
  c8d40d8
- fix: fix hasher err not nil value
  raymondproguy02
  committed
  9671ad4
- test: postgres integration test
  raymondproguy02
  committed
  934875d
- ci: fix test path, go version, add vet and postgres integration
  raymondproguy02
  committed
  96c5512
- Update README.md
  raymondproguy02
  authored
  832bebe
- format codebase with gofmt
  raymondproguy02
  committed
  0f7c1a0
- Update README.md
  raymondproguy02
  authored
  aa031e4
- Update README.md
  raymondproguy02
  authored
  a9466da
- Update SECURITY.md
  raymondproguy02
  authored
  266ae0f
Commits on Aug 20, 2026
- feat: extend interface defination for new features
  raymondproguy
  committed
  bf828b6
- chore: temporarily remove CI while iterating on oauth/ai branch
  raymondproguy
  committed
  02337e9
- feat: implement new methods to package store
  raymondproguy
  committed
  163c659
- feat: add all new methods to cryden facade
  raymondproguy
  committed
  099b1ee
Commits on Aug 21, 2026
- feat: oauth defination and implemtation with tests
  raymondproguy
  committed
  540b29b
- feat: oauth stores implemtation and db migration
  raymondproguy
  committed
  2fce6a7
- feat: ai types defination, validation and execution
  raymondproguy
  committed
  9b16a75
- test: test suite for ai validation and execution
  raymondproguy
  committed
  98c7f3a
- feat: added ai query to store interface defination and one real postgres implemntation
  raymondproguy
  committed
  f7645c1
- feat: update facade, config struct and engine with new oauth and ai features
  raymondproguy
  committed
  f4c9385
- docs: update README with new oauth ai features
  raymondproguy
  committed
  79bb330
- format codebase with gofmt
  raymondproguy
  committed
  11bc15a
- feat: smoketest for new oauth ai features
  raymondproguy
  committed
  0b6e10e
Commits on Aug 24, 2026
- ci: added as it was remove previously for test
  raymondproguy
  committed
  dd54761
- Merge pull request #3 from crydensync/oauth-ai
  raymondproguy
  authored
  010b7dd
Commits on Aug 30, 2026
- fix: return real error instead of swallowing crypto/rand failure
  raymondproguy
  committed
  c42dac5
- test: add regression coverage for the swallowed rand.Read error
  raymondproguy
  committed
  6847f27
- fix: close login timing side-channel for nonexistent-email attempts
  raymondproguy
  committed
  effab17
- test: add timing regression test for the login enumeration fix
  raymondproguy
  committed
  9e69de8
- feat: add Encryptor interface and AES-256-GCM implementation
  raymondproguy
  committed
  08ce5b2
- test: add Encryptor unit tests
  raymondproguy
  committed
  16e7fcb
- feat: add TOTPGenerator interface backed by pquerna/otp
  raymondproguy
  committed
  e200423
- test: add TOTPGenerator unit tests
  raymondproguy
  committed
  02023a4
- feat: add TOTPStore interface and TOTPSecret type
  raymondproguy
  committed
  966f947
- feat: add in-memory TOTPStore implementation
  raymondproguy
  committed
  beffe3b
- feat: add Postgres TOTPStore implementation
  raymondproguy
  committed
  2e262c8
- feat: add totp_secrets table migration
  raymondproguy
  committed
  a86696c
- feat: add MFAPendingIssuer for second-factor login handoff
  raymondproguy
  committed
  96f3627
- feat: add TOTP enrollment, confirmation, and disable flows
  raymondproguy
  committed
  8691fe6
- test: add unit tests for TOTP enrollment/confirm/disable
  raymondproguy
  committed
  7395644
- feat: pause Login with ErrTOTPRequired for accounts with 2FA enabled
  raymondproguy
  committed
  3d664cd
- test: add Login/CompleteLoginWithTOTP integration tests
  raymondproguy
  committed
  0fd2dcc
- feat: wire TOTP into Config, Engine, and the public facade
  raymondproguy
  committed
  ff39f23
- docs: document TOTP (2FA) setup and usage in README
  raymondproguy
  committed
  e48d696
- docs: add manual testing guide for 2FA/TOTP
  raymondproguy
  committed
  b9a0db8
- feat: add in-memory smoke test for 2FA/TOTP
  raymondproguy
  committed
  fea68e6
Commits on Aug 31, 2026
Commits on Sep 1, 2026
- feat: add PurposeMagicLink, reusing the existing VerificationStore
  raymondproguy
  committed
  e3f56fd
- feat: add MagicLinkSender interface
  raymondproguy
  committed
  fa32d75
- refactor: extract completePrimaryAuth out of Login
  raymondproguy
  committed
  065f55a
- feat: add RequestMagicLink and CompleteMagicLink
  raymondproguy
  committed
  0c92434
- test: add RequestMagicLink/CompleteMagicLink tests
  raymondproguy
  committed
  8bc8593
- feat: wire magic-link login into Config, Engine, and the public facade
  raymondproguy
  committed
  7c76bff
- docs: document magic-link login in README
  raymondproguy
  committed
  ea6da7d
- docs: add manual testing guide for magic-link login
  raymondproguy
  committed
  4804c6f
- feat: add in-memory smoke test for magic-link login
  raymondproguy
  committed
  68a97f9
- fix: configure TOTP in the magic-link smoke test's engine
  raymondproguy
  committed
  71b7bd5
- feature/magic-link
  raymondproguy
  committed
  84998cc
- feat: add RecoveryCode type and RecoveryCodeStore interface
  raymondproguy
  committed
  e039f72
- feat: add in-memory RecoveryCodeStore implementation
  raymondproguy
  committed
  c1c0fd5
- feat: add Postgres RecoveryCodeStore implementation
  raymondproguy
  committed
  054fdbe
- feat: add recovery_codes table migration
  raymondproguy
  committed
  99bb746
- fix: route LoginWithOAuth through completePrimaryAuth
  raymondproguy
  committed
  ebb12eb
- test: add regression tests for LoginWithOAuth's second-factor gate
  raymondproguy
  committed
  9ac7a7f
- feat: add recovery code generation and login completion
  raymondproguy
  committed
  abf4654
- test: add recovery code tests
  raymondproguy
  committed
  37d6d7c
- feat: wire recovery codes into Config, Engine, and the public facade
  raymondproguy
  committed
  37178ac
- docs: document recovery codes in README
  raymondproguy
  committed
  0580e04
- docs: add manual testing guide for recovery codes
  raymondproguy
  committed
  b30a2c3
- feat: add in-memory smoke test for recovery codes
  raymondproguy
  committed
  e8ec24c
- fix: update login_second_factor_test.go for the recoveryCodeStore param
  raymondproguy
  committed
  145c52e
- fix: generate recovery codes via crypto/rand directly, not TokenGenerator
  raymondproguy
  committed
  9c052e0
Commits on Sep 3, 2026
- feat: add BreachedPasswordChecker interface
  raymondproguy
  committed
  7e63266
- feat: add ErrPasswordBreached and password_breach_rejected audit event
  raymondproguy
  committed
  1198db6
- feat: check breached passwords in SignUp and ChangePassword
  raymondproguy
  committed
  aa90b63
- test: add breach-check tests
  raymondproguy
  committed
  eed56a3
- docs: document breached-password check in README
  raymondproguy
  committed
  77bb193
- docs: add manual testing guide for breached-password check
  raymondproguy
  committed
  b58db32
- feat: add in-memory smoke test for breached-password check
  raymondproguy
  committed
  0a57267
- feat: add PasswordPolicy struct and validation
  raymondproguy
  committed
  58c62e3
- test: add PasswordPolicy unit tests
  raymondproguy
  committed
  22880b6
- feat: enforce password policy in SignUp and ChangePassword
  raymondproguy
  committed
  4c44a4b
- test: add password policy enforcement tests
  raymondproguy
  committed
  18d0f29
- feat: restore breach-checker-skipped-by-policy case in the smoke test
  raymondproguy
  committed
  25a5094
- docs: document password policy in README
  raymondproguy
  committed
  31f0ed5
- docs: add manual testing guide for password policy
  raymondproguy
  committed
  34317d7
- feat: add in-memory smoke test for password policy
  raymondproguy
  committed
  735d82d
- fix: don't clobber a partial custom PasswordPolicy on defaulting
  raymondproguy
  committed
  17080e0
- feat/password-policy
  raymondproguy
  committed
  735a1af
- feat/breached-password-check
  raymondproguy
  committed
  8fe4e30
- Merge pull request #4 from crydensync/feature/2fa-totp
  raymondproguy
  authored
  4ab6093
- Merge pull request #5 from crydensync/feature/webauthn-passkeys
  raymondproguy
  authored
  89ab1c9
- fix/oauth-second-factor-and-recovery-codes
  raymondproguy
  committed
  5735135
- Merge pull request #7 from crydensync/feature/magic-link
  raymondproguy
  authored
  8e06036
- Merge pull request #6 from crydensync/fix/oauth-second-factor-and-recovery-codes
  raymondproguy
  authored
  2ecd86f
- Merge pull request #8 from crydensync/feat/breached-password-check
  raymondproguy
  authored
  f983528
- Merge pull request #9 from crydensync/feat/password-policy
  raymondproguy
  authored
  1d86ba1
- fix: stop mutating the global crypto/rand.Reader in tests
  raymondproguy
  committed
  4bf725d
- fix: correct wrong signature-counter assumption in webauthn test
  raymondproguy
  committed
  86a2aad
- fix: update breach_test.go call sites for the policy param
  raymondproguy
  committed
  da0e58d
- feat/password-policy2
  raymondproguy
  committed
  a0c53e4
- Merge pull request #10 from crydensync/feat/password-policy2
  raymondproguy
  authored
  8e95ef7
Commits on Sep 4, 2026
- cryden internal docs
  raymondproguy
  committed
  5b6c7f5
- feat: add anomaly detection logic and store.AnomalyStore interface
  raymondproguy
  committed
  5280b86
- feat: add memory and postgres AnomalyStore plus migration 0006
  raymondproguy
  committed
  c7b5398
- feat: wire anomaly detection into every primary auth path
  raymondproguy
  committed
  22958be
- test: cover anomaly detection logic, stores and wiring
  raymondproguy
  committed
  0f70d61
- test: add anomaly-detection smoke test
  raymondproguy
  committed
  56c3158
- docs: add anomaly-detection manual test guide
  raymondproguy
  committed
  2559fbc
- docs: mark anomaly detection done, queue item 9
  raymondproguy
  committed
  d30ed74
Commits on Sep 13, 2026
- Merge branch 'main' into feat/anomaly-detection
  raymondproguy
  authored
  c1b6557

Commits

Commits on Mar 9, 2026

Commits on Mar 10, 2026

Commits on Mar 24, 2026

Commits on Mar 25, 2026

Commits on Apr 3, 2026

Commits on Apr 4, 2026

Commits on Apr 5, 2026

Commits on Jul 26, 2026

Commits on Jul 27, 2026

Commits on Jul 28, 2026

Commits on Aug 9, 2026

Commits on Aug 10, 2026

Commits on Aug 11, 2026

Commits on Aug 20, 2026

Commits on Aug 21, 2026

Commits on Aug 24, 2026

Commits on Aug 30, 2026

Commits on Aug 31, 2026