47 lines
2.3 KiB
Markdown
47 lines
2.3 KiB
Markdown
# Web UI Progress Tracker
|
|
|
|
This document tracks the ongoing frontend implementation tasks required to
|
|
complete the Identity Provider Web Application as identified in `WEB_AUDIT.md`.
|
|
|
|
## Prioritized UI Task Checklist
|
|
|
|
### Phase 1: UX Polish & Session Insights
|
|
|
|
- [x] **WebAuthn UX Improvements:** Refine cross-device registration and login
|
|
flows in `LoginPage.tsx` and `RegisterPage.tsx` to better guide users
|
|
(e.g., prompt for hardware token insertion or QR code scanning).
|
|
- [x] **Session Review Interface:** Implement a dashboard view where
|
|
authenticated users can view active session tokens and historical
|
|
connection logs (timestamps, IP addresses).
|
|
- [x] **Layout System:** Create standard layout wrapper components (`Layout.tsx`
|
|
enhancements) to handle global navigation for authenticated states.
|
|
|
|
### Phase 2: Credential Redundancy (User Settings)
|
|
|
|
- [x] **Passkey Management Panel:** Develop a user settings UI to list
|
|
registered authenticators.
|
|
- [x] **Register Additional Passkeys:** Implement the flow for authenticated
|
|
users to register secondary/backup hardware tokens.
|
|
- [x] **Revoke Passkey UI:** Add functionality for users to permanently delete a
|
|
specific compromised credential.
|
|
|
|
### Phase 3: Administrative Workflows
|
|
|
|
- [x] **Admin Dashboard Layout:** Create a protected route/layout strictly for
|
|
users with administrative roles.
|
|
- [x] **Manual State Machine Activation:** The UI to review and toggle users
|
|
from a default 'pending' state to 'active' before sessions can be issued
|
|
(Use Case 3).
|
|
- [x] **Out-of-Band Account Recovery:** A specific UI for administrators to
|
|
execute a database override, generating and binding a new WebAuthn
|
|
challenge to an existing user's UUID when all previous authenticators are
|
|
lost (Use Case 12).
|
|
- [x] **Global Session & Device Revocation:** The interface for administrators
|
|
to instantly revoke active Valkey sessions or delete specific device
|
|
nicknames from PostgreSQL (Use Cases 6 & 7.1).
|
|
- [x] **AAGUID Allow-List Management:** An interface to manage the enterprise
|
|
allow-list of approved hardware Authenticator Attestation GUIDs, ensuring
|
|
software passkeys are rejected (Section 5.3).
|
|
- [x] **System Audit Log Viewer:** Develop a UI for admins to review system-wide
|
|
audit records directly from the database.
|