zeekay 12c93cb97b auth: migrate account-portal worker IAM calls to canonical /v1/iam/* ...

account.hanzo.id / account.lux.id portal worker now uses the canonical
/v1/iam/* IAM surface (HIP-0111), off legacy /api/* and bare /oauth/*.

- getUserInfo  /api/userinfo            -> /v1/iam/userinfo
- getUser      /api/get-user            -> /v1/iam/get-user
- exchangeCode /api/login/oauth/access_token -> /v1/iam/oauth/token
- buildLoginUrl: drop bare /oauth/authorize suffix; point at the brand
  /login page with OAuth params (branded two-pane login, no host leak)
- add-provider Google/GitHub links -> /v1/iam/oauth/authorize?provider=
- client-side set-password + update-user (x3): now same-origin relative
  /v1/iam/{set-password,update-user} through the worproxy, which injects
  the access token server-side from the HttpOnly cookie (removes the
  cross-origin iam.hanzo.ai hop and the Bearer-null page-JS path)
- worker proxy guard: /api/ -> /v1/iam/

Flagged for follow-up (untouched): the iam.hanzo.ai/account console links
for MFA/account-deletion (first-party IAM admin UI). Push-blocked: the
hanzoai/account remote does not yet exist on GitHub; committed locally.

2026-06-24 19:27:09 -07:00

src

auth: migrate account-portal worker IAM calls to canonical /v1/iam/*

2026-06-24 19:27:09 -07:00

package-lock.json

auth: migrate account-portal worker IAM calls to canonical /v1/iam/*

2026-06-24 19:27:09 -07:00

package.json

auth: migrate account-portal worker IAM calls to canonical /v1/iam/*

2026-06-24 19:27:09 -07:00

wrangler.toml

auth: migrate account-portal worker IAM calls to canonical /v1/iam/*

2026-06-24 19:27:09 -07:00

S

Description

pull mirror of github.com/hanzoai/account

166 KiB

Languages

Go 100%