Feat/anomaly detection - #13

Merged

raymondproguy merged 208 commits into

mainfrom

feat/anomaly-detection

Sep 13, 2026

Commits on Mar 9, 2026

docs: Improve formatting of roadmap in README.md
raymondproguy
authored
a54c24c
ci: add release automation
raymondproguy
authored
68c19b6
ci: fix test path to internal/tests
raymondproguy
committed
12653c2
ci: add release workflow
raymondproguy
committed
fa9fbd4
fix: add root package for correct imports
raymondproguy
committed
12beff3
docs: add better test examples
raymondproguy
committed
c0c8dda
fix: remove old faced directory
raymondproguy
committed
cb647a4
ci: fix release workflow for public repo
raymondproguy
committed
2c37cc2
fix: add root package file
raymondproguy
committed
db18422
Add permissions for contents write access
raymondproguy
authored
fdf4469
Fix import statement formatting in main.go
raymondproguy
authored
852cf63
Fix import statement formatting in main.go
raymondproguy
authored
5fab527
Update release.yml
raymondproguy
authored
eed5389

Commits on Mar 10, 2026

docs: Add under the hood for crydensync
raymondproguy
committed
962f18f
docs: remove duplicate notes
raymondproguy
committed
f3f2731
docs: Fixed link typo
raymondproguy
committed
818255d

Commits on Mar 24, 2026

feat: Update session with hash and lookup for tokens
raymondproguy
committed
9cf05b0
feat: Update session interface with hash and lookup for tokens
raymondproguy
committed
e6e3b2f
feat: new session store with hash and lookup for tokens
raymondproguy
committed
5f14089
feat: update session memory store with hash and lookup for tokens
raymondproguy
committed
c00651e
feat: service for hash and lookup for tokens
raymondproguy
committed
9025d3c
feat: Upadate sqlite schemas with new token hash
raymondproguy
committed
b22c91d
feat: Upadte engine with new token hash
raymondproguy
committed
309da93
test: Test for token hashing
raymondproguy
committed
a99b5c5
feat: Session mongodb storage implementation
raymondproguy
committed
eeb7ac0
feat: Session postgre sql storage implementation
raymondproguy
committed
00f7ba2
fix: Update session postgre sql auto migration
raymondproguy
committed
488ac60

Commits on Mar 25, 2026

feat: Add postgres and mongodb method to faced cryden.go file"
raymondproguy
committed
1ec80d0
fix: Fixed typo in session store and add getDB method for sqlite
raymondproguy
committed
e7421df
fix: Fixed typo in memory session store
raymondproguy
committed
4aff200
fix: Fixed rate limit reset in login func
raymondproguy
committed
efd97da
fix: Fix typo, and used getDB in faced cryden.go file
raymondproguy
committed
0494528
fix: Fixed password validation
raymondproguy
committed
9eadb04
fix: Fixed allow func typos and reset limit
raymondproguy
committed
b4f8e6f
feat: add close() method
raymondproguy
committed
9767faa
fix: Fixed rate limit in login func
raymondproguy
committed
c36409a
feat: New generate secure ID to randomize ID's
raymondproguy
committed
b6c4ead
feat: Add basic Close() for memory stores
raymondproguy
committed
8b81228
feat: Add Close() func to cancel db conections in sqlite
raymondproguy
committed
0cc9f82
feat: Add Close() func to cancel db conections in postgre sql and mongo db
raymondproguy
committed
186fb15

Commits on Apr 3, 2026

Commits on Apr 4, 2026

refactor: split engine.go into auth, user, session files
raymondproguy
committed
7ae34b5
feat: add file audit logger with JSON output and rotation support
raymondproguy
committed
bcc98e6
test: Added file logger test
raymondproguy
committed
a2b5390

Commits on Apr 5, 2026

Commits on Jul 28, 2026

Commits on Aug 9, 2026

feat: email delivery for verification, no imlm in v2
raymondproguy02
committed
73be7c5
feat(auth): signup and it's test
raymondproguy02
committed
89f75ea
feat(auth): login and it's login_test
raymondproguy02
committed
5a6d778
feat(auth): user account and test
raymondproguy02
committed
59d3f78
feat(auth): email feature, verify and test
raymondproguy02
committed
eda74ae
feat(auth): sentinel error, logout and test
raymondproguy02
committed
b970a96
feat: token refresh or access
raymondproguy02
committed
483e064

Commits on Aug 10, 2026

Commits on Aug 11, 2026

feat: Public facade and configs, wrapping up
raymondproguy02
committed
57c1af3
fix: typo in config test file
raymondproguy02
committed
5618240
docs: Readme contributing security code-of-conduct docs
raymondproguy02
committed
b1b354c
Merge pull request #2 from crydensync/crydenv2
raymondproguy02
authored
2ae8100
format codebase with gofmt
raymondproguy02
committed
c8d40d8
fix: fix hasher err not nil value
raymondproguy02
committed
9671ad4
test: postgres integration test
raymondproguy02
committed
934875d
ci: fix test path, go version, add vet and postgres integration
raymondproguy02
committed
96c5512
Update README.md
raymondproguy02
authored
832bebe
format codebase with gofmt
raymondproguy02
committed
0f7c1a0
Update README.md
raymondproguy02
authored
aa031e4
Update README.md
raymondproguy02
authored
a9466da
Update SECURITY.md
raymondproguy02
authored
266ae0f

Commits on Aug 20, 2026

Commits on Aug 21, 2026

feat: oauth defination and implemtation with tests
raymondproguy
committed
540b29b
feat: oauth stores implemtation and db migration
raymondproguy
committed
2fce6a7
feat: ai types defination, validation and execution
raymondproguy
committed
9b16a75
test: test suite for ai validation and execution
raymondproguy
committed
98c7f3a
feat: added ai query to store interface defination and one real postgres implemntation
raymondproguy
committed
f7645c1
feat: update facade, config struct and engine with new oauth and ai features
raymondproguy
committed
f4c9385
docs: update README with new oauth ai features
raymondproguy
committed
79bb330
format codebase with gofmt
raymondproguy
committed
11bc15a
feat: smoketest for new oauth ai features
raymondproguy
committed
0b6e10e

Commits on Aug 24, 2026

ci: added as it was remove previously for test
raymondproguy
committed
dd54761
Merge pull request #3 from crydensync/oauth-ai
raymondproguy
authored
010b7dd

Commits on Aug 30, 2026

fix: return real error instead of swallowing crypto/rand failure
raymondproguy
committed
c42dac5
test: add regression coverage for the swallowed rand.Read error
raymondproguy
committed
6847f27
fix: close login timing side-channel for nonexistent-email attempts
raymondproguy
committed
effab17
test: add timing regression test for the login enumeration fix
raymondproguy
committed
9e69de8
feat: add Encryptor interface and AES-256-GCM implementation
raymondproguy
committed
08ce5b2
test: add Encryptor unit tests
raymondproguy
committed
16e7fcb
feat: add TOTPGenerator interface backed by pquerna/otp
raymondproguy
committed
e200423
test: add TOTPGenerator unit tests
raymondproguy
committed
02023a4
feat: add TOTPStore interface and TOTPSecret type
raymondproguy
committed
966f947
feat: add in-memory TOTPStore implementation
raymondproguy
committed
beffe3b
feat: add Postgres TOTPStore implementation
raymondproguy
committed
2e262c8
feat: add totp_secrets table migration
raymondproguy
committed
a86696c
feat: add MFAPendingIssuer for second-factor login handoff
raymondproguy
committed
96f3627
feat: add TOTP enrollment, confirmation, and disable flows
raymondproguy
committed
8691fe6
test: add unit tests for TOTP enrollment/confirm/disable
raymondproguy
committed
7395644
feat: pause Login with ErrTOTPRequired for accounts with 2FA enabled
raymondproguy
committed
3d664cd
test: add Login/CompleteLoginWithTOTP integration tests
raymondproguy
committed
0fd2dcc
feat: wire TOTP into Config, Engine, and the public facade
raymondproguy
committed
ff39f23
docs: document TOTP (2FA) setup and usage in README
raymondproguy
committed
e48d696
docs: add manual testing guide for 2FA/TOTP
raymondproguy
committed
b9a0db8
feat: add in-memory smoke test for 2FA/TOTP
raymondproguy
committed
fea68e6

Commits on Aug 31, 2026

Commits on Sep 1, 2026

feat: add PurposeMagicLink, reusing the existing VerificationStore
raymondproguy
committed
e3f56fd
feat: add MagicLinkSender interface
raymondproguy
committed
fa32d75
refactor: extract completePrimaryAuth out of Login
raymondproguy
committed
065f55a
feat: add RequestMagicLink and CompleteMagicLink
raymondproguy
committed
0c92434
test: add RequestMagicLink/CompleteMagicLink tests
raymondproguy
committed
8bc8593
feat: wire magic-link login into Config, Engine, and the public facade
raymondproguy
committed
7c76bff
docs: document magic-link login in README
raymondproguy
committed
ea6da7d
docs: add manual testing guide for magic-link login
raymondproguy
committed
4804c6f
feat: add in-memory smoke test for magic-link login
raymondproguy
committed
68a97f9
fix: configure TOTP in the magic-link smoke test's engine
raymondproguy
committed
71b7bd5
feature/magic-link
raymondproguy
committed
84998cc
feat: add RecoveryCode type and RecoveryCodeStore interface
raymondproguy
committed
e039f72
feat: add in-memory RecoveryCodeStore implementation
raymondproguy
committed
c1c0fd5
feat: add Postgres RecoveryCodeStore implementation
raymondproguy
committed
054fdbe
feat: add recovery_codes table migration
raymondproguy
committed
99bb746
fix: route LoginWithOAuth through completePrimaryAuth
raymondproguy
committed
ebb12eb
test: add regression tests for LoginWithOAuth's second-factor gate
raymondproguy
committed
9ac7a7f
feat: add recovery code generation and login completion
raymondproguy
committed
abf4654
test: add recovery code tests
raymondproguy
committed
37d6d7c
feat: wire recovery codes into Config, Engine, and the public facade
raymondproguy
committed
37178ac
docs: document recovery codes in README
raymondproguy
committed
0580e04
docs: add manual testing guide for recovery codes
raymondproguy
committed
b30a2c3
feat: add in-memory smoke test for recovery codes
raymondproguy
committed
e8ec24c
fix: update login_second_factor_test.go for the recoveryCodeStore param
raymondproguy
committed
145c52e
fix: generate recovery codes via crypto/rand directly, not TokenGenerator
raymondproguy
committed
9c052e0

Commits on Sep 3, 2026

feat: add BreachedPasswordChecker interface
raymondproguy
committed
7e63266
feat: add ErrPasswordBreached and password_breach_rejected audit event
raymondproguy
committed
1198db6
feat: check breached passwords in SignUp and ChangePassword
raymondproguy
committed
aa90b63
test: add breach-check tests
raymondproguy
committed
eed56a3
docs: document breached-password check in README
raymondproguy
committed
77bb193
docs: add manual testing guide for breached-password check
raymondproguy
committed
b58db32
feat: add in-memory smoke test for breached-password check
raymondproguy
committed
0a57267
feat: add PasswordPolicy struct and validation
raymondproguy
committed
58c62e3
test: add PasswordPolicy unit tests
raymondproguy
committed
22880b6
feat: enforce password policy in SignUp and ChangePassword
raymondproguy
committed
4c44a4b
test: add password policy enforcement tests
raymondproguy
committed
18d0f29
feat: restore breach-checker-skipped-by-policy case in the smoke test
raymondproguy
committed
25a5094
docs: document password policy in README
raymondproguy
committed
31f0ed5
docs: add manual testing guide for password policy
raymondproguy
committed
34317d7
feat: add in-memory smoke test for password policy
raymondproguy
committed
735d82d
fix: don't clobber a partial custom PasswordPolicy on defaulting
raymondproguy
committed
17080e0
feat/password-policy
raymondproguy
committed
735a1af
feat/breached-password-check
raymondproguy
committed
8fe4e30
Merge pull request #4 from crydensync/feature/2fa-totp
raymondproguy
authored
4ab6093
Merge pull request #5 from crydensync/feature/webauthn-passkeys
raymondproguy
authored
89ab1c9
fix/oauth-second-factor-and-recovery-codes
raymondproguy
committed
5735135
Merge pull request #7 from crydensync/feature/magic-link
raymondproguy
authored
8e06036
Merge pull request #6 from crydensync/fix/oauth-second-factor-and-recovery-codes
raymondproguy
authored
2ecd86f
Merge pull request #8 from crydensync/feat/breached-password-check
raymondproguy
authored
f983528
Merge pull request #9 from crydensync/feat/password-policy
raymondproguy
authored
1d86ba1
fix: stop mutating the global crypto/rand.Reader in tests
raymondproguy
committed
4bf725d
fix: correct wrong signature-counter assumption in webauthn test
raymondproguy
committed
86a2aad
fix: update breach_test.go call sites for the policy param
raymondproguy
committed
da0e58d
feat/password-policy2
raymondproguy
committed
a0c53e4
Merge pull request #10 from crydensync/feat/password-policy2
raymondproguy
authored
8e95ef7

Commits on Sep 4, 2026

cryden internal docs
raymondproguy
committed
5b6c7f5
feat: add anomaly detection logic and store.AnomalyStore interface
raymondproguy
committed
5280b86
feat: add memory and postgres AnomalyStore plus migration 0006
raymondproguy
committed
c7b5398
feat: wire anomaly detection into every primary auth path
raymondproguy
committed
22958be
test: cover anomaly detection logic, stores and wiring
raymondproguy
committed
0f70d61
test: add anomaly-detection smoke test
raymondproguy
committed
56c3158
docs: add anomaly-detection manual test guide
raymondproguy
committed
2559fbc
docs: mark anomaly detection done, queue item 9
raymondproguy
committed
d30ed74

Commits on Sep 13, 2026

Merge branch 'main' into feat/anomaly-detection
raymondproguy
authored
c1b6557