Release v0.3.0 - Auth & Security

v0.3.0 - Auth & Security

New Features

OAuth Provider Management

• Support for 8 providers: Google, GitHub, Microsoft, Slack, Apple, Twitter, Discord, LinkedIn
• Install, enable/disable, configure (client ID/secret), and test connections
• Provider status monitoring dashboard

Multi-Factor Authentication (MFA)

• Enable/disable MFA with TOTP or SMS methods
• Verification code confirmation flow
• Backup code generation with copy and download

Role-Based Access Control

• Create, view, and delete roles with granular permissions
• Permission categories: users, content, settings, billing, admin
• Assign roles to users

Device Management

• Register new devices (desktop, laptop, mobile, tablet, server, CI)
• Trust and revoke device access
• Device list with status and last-seen tracking

Security Scanning

• Quick and full security scans
• Security score dashboard (0-100)
• Findings by severity (critical, high, medium, low, info)
• Audit log and report generation

Rate Limiting

• Configure limits per endpoint category (auth, API, webhooks, admin)
• Real-time usage monitoring with progress bars
• Per-endpoint and global rate limit reset

Webhook Management

• Create webhooks with URL, events, and signing secret
• 7 event types across user, auth, and role categories
• Test delivery, view logs, and manage lifecycle

Audit Trail

• Filterable audit log viewer (action, date range, user)
• Export to JSON and CSV
• Auto-refresh with 10-second intervals
• Color-coded action and status badges

Technical Details

• 39 new files (29 API routes + 8 pages + 2 config updates)
• +6,470 lines of code
• All features delegate to nself CLI via executeNselfCommand
• Full input validation on all API routes
• Zero lint errors, zero type errors