Skip to content

Private Landing v1.3.0

Choose a tag to compare

View all tags
@vhscom vhscom released this 16 Feb 10:57
· 59 commits to main since this release
1.3.0
This tag was signed with the committer’s verified signature.
vhscom
GPG key ID: E7788EBA96876C6A
Verified
Learn about vigilant mode.
6b5701f
This commit was signed with the committer’s verified signature.
vhscom
GPG key ID: E7788EBA96876C6A
Verified
Learn about vigilant mode.

🛤️ URL Reorganization & Wizard UI

This release restructures all routes into semantic groups, replaces implicit auth with explicit per-route middleware, and ships an interactive authentication wizard.

What's New

  • 🗂️ Semantic Route Groups
    All routes reorganized from flat /api/* into /health, /auth/*, /account/* with explicit per-route requireAuth middleware — no more declaration-order coupling (ADR-005)

  • 🧙 Tabbed Wizard UI
    Interactive four-step demo: Register, Login, Password, Logout with live API console showing requests and responses

  • 🔍 Auth Status Badge
    Click-to-check authentication state against /account/me, with automatic check on page load

  • 📴 No-JS Progressive Enhancement
    Native form submissions with fragment-based status banners via CSS :target — the demo works without JavaScript

Changes

  • Health endpoint public — GET /health no longer requires authentication, following infrastructure conventions
  • Simplified health — removed /health/live and /health/ready; single /health endpoint is sufficient for Workers
  • /account/me — replaces /api/ping, returns { userId } for the authenticated user
  • Console UX — stays visible during fetch with "waiting..." indicator; status code displayed inline with command

Accessibility

  • <main> landmark for screen reader navigation
  • <meta name="theme-color"> for dark and light modes
  • prefers-reduced-motion support with suppressed noImportantStyles lint rule

Documentation

Test Coverage

  • 315 unit tests, 63 integration tests (378 total)
  • Integration tests updated for new route paths and fragment-based redirects

Packages (v1.3.0)

  • @private-landing/core
  • @private-landing/infrastructure
  • @private-landing/schemas
  • @private-landing/types
  • @private-landing/cloudflare-workers

Intended Use

Private Landing is intended for:

  • Education & learning around modern authentication systems
  • Reference architecture for Cloudflare Workers
  • Bootstrapping custom authentication implementations
  • Security review and discussion

It is not a turnkey production authentication service.

Stability

Private Landing v1.3.0 is a breaking URL change with no migration period — the wizard UI ships with idiomatic URLs from the start. No external consumers existed on the previous /api/* paths.

Assets 2
Loading