- 2026-05-26 — Error display unified across all 5 pages (sign-in / register / reset / change-password / authorization). New shared
src/parseError.tsrenders Pryv error envelopes consistently: walkserror.datawhether array (per-field validation messages like password format) or object (echoed payload frominvalid-request-structure), appends the errorid, and falls back to a JSON dump for unknown shapes so the UI is never silent on an unexpected error. - 2026-05-26 —
requestCmcScopeUpdatenow throws on failure (instead of returning{ error }), matching the rest ofauthServiceand letting the unified error-display pipeline handle it uniformly. - 2026-05-26 —
Authorization.tsxhandleAcceptnow checks per-result errors on theensureBaseStreamsbatch call (via newthrowIfBatchErrorsexport). Pryv batch responses return HTTP 200 even when individual ops fail; the prior code silently swallowed those. - 2026-05-06 — Hostnames flipped to
demo-account.datasafe.dev(demo) andaccount.datasafe.dev(prod), replacingdemo-auth.datasafe.dev/auth.datasafe.dev. Source-of-truth tracked indev-deploy/config/apps.yml § app-web-auth3-hdsandpryv.open-pryv-io.auth-urls. Plan:_plans/55-app-web-auth3-rewrite-and-pwd-reset-atwork/. - 2026-05-06 — Hardened
scripts/deploy.shandscripts/deploy-prod.sh: reset toorigin/gh-pages(resp.origin/main) before build,.nojekylltouch, post-build sanity check (assertindex.html,404.html,CNAME,assets/index-*.js, expected CNAME content).
- 2026-05-26 —
closeOrRedirectno longer navigates to/access/self(a 404) when the auth flow'sreturnURLis the sentinel valueself(orself#). It now closes the popup, matching the empty /'false'branch. - 2026-05-26 — Account-creation password-format errors now show the specific message (e.g. "Password should have between 5 and 23 characters") instead of only the generic "Parameters' format is invalid" wrapper.
- 2026-05-26 — Permission-acceptance failures (e.g. server rejecting a
streamId) now display the underlying server error to the user instead of silently freezing the UI. - 2026-05-26 — Added
@tailwindcss/typographyas a devDependency sonpm run buildsucceeds end-to-end (the symlinkedhds-styleconsumes it). Auto-fixed pre-existing semi-style lint errors insrc/global.d.ts+src/loadSettings.ts. - 2026-05-06 — React rewrite (
feat/react-rewrite) was runtime-broken end-to-end againstpryv-lib@3.0.3becausepryv.utils.superagentwas dropped in v3. Migrated 16 HTTP call sites insrc/services/authService.tsfrom superagent's chained API topryv.utils.fetchPost/fetchGet(rawfetchforDELETE). Alsosrc/context/AuthContext.tsx(poll-URL GET ininit()+ POST inupdateAccessState()). Plus a null-guard insrc/pages/Authorization.tsx:82-87soclientData: nullfrom the auth-request payload isn't forwarded to/accesses/check-app(the Pryv API rejects null with400 invalid-parameters-format).
- Terms & conditions handling
- Added creation of needed streams on registration
- Migrated from
rec.latobackloop.dev
- Language not being forwarded at user creation
- Security dependency updates (moment, express, qs, url-parse, follow-redirects, shelljs, etc.)
- Docker image build and CI pipeline
- Change password page
- MFA login error handling (stripped error fields)
- Error message forwarding
- Migrated Docker registry
- System streams support for registration
- Service info discovery configuration
- Registration behavior adapts to platform version
- Removed user login after registration (moved server-side)
- Published for Open Pryv.io
returnURLbeing lost during auth flow
- Referer support for auth requests
- GitHub Pages fork deployment guide
pollUrlparameter naming (pollvspollUrl)- Syntax and param cleanup in auth flow
- Migrated to lib-js NPM version
- Bumped Node requirement to 12
- Refactored Pryv to JS-lib extension pattern
- License file
- Unit and TestCafe documentation links
- Removed accepted/refused states from flow
- Return
apiEndpointwith accept state - Simplified error handling
- Tests adapted for new prop context initialization
- Updated snapshots
- DNS-less mode support
- MFA (multi-factor authentication) integration
- Default domain handling
- Various bug fixes (return URL, permissions)
- Made email optional for registration
- Client data display with Markdown support
- Requesting app ID display
pollKey-based auth parameter retrieval- Stream name display (instead of ID) in permissions
- Multiple submit prevention
- Improved async flow with error catching
- Better permission dialog styling
- Single-page auth flow refactoring
- Service info integration for hostings
- OAuth settings support
- Cancel action and app closing flow
- 404 component
- Router history mode (removed hashbang)
- Publish scripts and deployment instructions
- Initial release (forked from Pryv app-web-auth3)
- Vue.js authentication webapp
- Login, registration, and password reset flows
- Authorization flow with permissions dialog
- Hosting selection
- E2E tests with TestCafe
- Unit tests with Jest
- ESLint configuration