tylerg/auth-yes
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
auth-yes/docs/archive/WEB_PROGRESS.md

2.3 KiB
Raw Permalink Blame History

Web UI Progress Tracker

This document tracks the ongoing frontend implementation tasks required to complete the Identity Provider Web Application as identified in WEB_AUDIT.md.

Prioritized UI Task Checklist

Phase 1: UX Polish & Session Insights

  • WebAuthn UX Improvements: Refine cross-device registration and login flows in LoginPage.tsx and RegisterPage.tsx to better guide users (e.g., prompt for hardware token insertion or QR code scanning).
  • Session Review Interface: Implement a dashboard view where authenticated users can view active session tokens and historical connection logs (timestamps, IP addresses).
  • Layout System: Create standard layout wrapper components (Layout.tsx enhancements) to handle global navigation for authenticated states.

Phase 2: Credential Redundancy (User Settings)

  • Passkey Management Panel: Develop a user settings UI to list registered authenticators.
  • Register Additional Passkeys: Implement the flow for authenticated users to register secondary/backup hardware tokens.
  • Revoke Passkey UI: Add functionality for users to permanently delete a specific compromised credential.

Phase 3: Administrative Workflows

  • Admin Dashboard Layout: Create a protected route/layout strictly for users with administrative roles.
  • Manual State Machine Activation: The UI to review and toggle users from a default 'pending' state to 'active' before sessions can be issued (Use Case 3).
  • Out-of-Band Account Recovery: A specific UI for administrators to execute a database override, generating and binding a new WebAuthn challenge to an existing user's UUID when all previous authenticators are lost (Use Case 12).
  • Global Session & Device Revocation: The interface for administrators to instantly revoke active Valkey sessions or delete specific device nicknames from PostgreSQL (Use Cases 6 & 7.1).
  • AAGUID Allow-List Management: An interface to manage the enterprise allow-list of approved hardware Authenticator Attestation GUIDs, ensuring software passkeys are rejected (Section 5.3).
  • System Audit Log Viewer: Develop a UI for admins to review system-wide audit records directly from the database.