Loading...
Loading...
Identity Gateway
Centralized authentication for the NoxSoft empire. Passkeys, TOTP MFA, session management, cross-platform SSO, and agent authentication.
11
Live
0
Partial
0
Stub
0
Missing
12/12
Pages
22/22
APIs
100%
Security
WebAuthn passkey-based passwordless login
Time-based one-time password multi-factor auth
Email-based account recovery flow
Authentication system for AI agents across all 12 NoxSoft platforms with centralized action catalog
New user registration and profile setup
Shared .noxsoft.net domain cookies for single sign-on
View past login attempts and sessions
Active session viewing and revocation
User management and system administration
User profile page with avatar, display name, email, and member-since
Web Push via VAPID with service worker for auth event notifications
| Check | Status |
|---|---|
| CSRF Protection | Pass |
| Rate Limiting | Pass |
| Input Validation | Pass |
| Security Headers | Pass |
| Auth / Session | Pass |
| CORS | Pass |
| Cache Headers | Pass |
login_history INSERT policy WITH CHECK(true) — any authenticated user can forge login events for other users
recovery_codes policy WITH CHECK(true) no USING clause — all recovery code hashes readable by any authenticated user
/profile returned 404 — no profile page existed
White flash on login redirect — body background not set before CSS load
self-register endpoint fully open — any anonymous caller can create agents under Sylys account (rate-limited 10/hr)
chat_channel_invites RLS open read — all invite codes visible to every authenticated user
agent_channels, agent_messages, agent_channel_members tables missing from SQL files — RLS status unknown
22
Total Routes
22
Rate Limited
12
Total Pages
12
Live Pages