From 536c82525d8cfb68565b475199c4b9ab92ef6765 Mon Sep 17 00:00:00 2001 From: Loganathan G P <106108501+logusivam@users.noreply.github.com> Date: Sat, 1 Aug 2026 15:35:49 +0530 Subject: [PATCH 1/5] fix(release): rename .well-known to bypass vercel block and add rewrite --- CODE_OF_CONDUCT.md | 4 +- apps/web/index.html | 238 ++++++++++-------- apps/web/public/robots.txt | 2 +- apps/web/public/sitemap.xml | 8 +- .../{.well-known => well-known}/security.txt | 2 +- apps/web/vercel.json | 6 +- package.json | 2 +- vercel.json | 6 +- 8 files changed, 148 insertions(+), 120 deletions(-) rename apps/web/public/{.well-known => well-known}/security.txt (70%) diff --git a/CODE_OF_CONDUCT.md b/CODE_OF_CONDUCT.md index 99e2b0a..96f1e3b 100644 --- a/CODE_OF_CONDUCT.md +++ b/CODE_OF_CONDUCT.md @@ -58,8 +58,8 @@ representative at an online or offline event. ## Enforcement Instances of abusive, harassing, or otherwise unacceptable behavior may be -reported to the community leaders at **logusivam26@gmail.com**. All complaints -will be reviewed and investigated promptly and fairly. +reported to the community leaders at **devbridgeenquirz@gmail.com**. All +complaints will be reviewed and investigated promptly and fairly. All community leaders are obligated to respect the privacy and security of the reporter of any incident. diff --git a/apps/web/index.html b/apps/web/index.html index a6aec23..44b3907 100644 --- a/apps/web/index.html +++ b/apps/web/index.html @@ -1,43 +1,48 @@ - - - - - - TokenForge — JWT Auth System Built From Scratch | No Auth0 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - + + + + +
+ + +
+ +
+ + + + - - - - - + }); + + + + \ No newline at end of file diff --git a/apps/web/public/robots.txt b/apps/web/public/robots.txt index fd97494..fda5f4f 100644 --- a/apps/web/public/robots.txt +++ b/apps/web/public/robots.txt @@ -5,4 +5,4 @@ Disallow: /profile Disallow: /dashboard Disallow: /oauth/ -Sitemap: https://tokenforge.dev/sitemap.xml +Sitemap: https://tokenforge-dev.vercel.app/sitemap.xml diff --git a/apps/web/public/sitemap.xml b/apps/web/public/sitemap.xml index b895f18..3a7eff9 100644 --- a/apps/web/public/sitemap.xml +++ b/apps/web/public/sitemap.xml @@ -1,25 +1,25 @@ - https://tokenforge.dev/ + https://tokenforge-dev.vercel.app/ 2026-07-22 monthly 1.0 - https://tokenforge.dev/login + https://tokenforge-dev.vercel.app/login 2026-07-22 monthly 0.8 - https://tokenforge.dev/register + https://tokenforge-dev.vercel.app/register 2026-07-22 monthly 0.8 - https://tokenforge.dev/terms-of-service + https://tokenforge-dev.vercel.app/terms-of-service 2026-07-22 yearly 0.3 diff --git a/apps/web/public/.well-known/security.txt b/apps/web/public/well-known/security.txt similarity index 70% rename from apps/web/public/.well-known/security.txt rename to apps/web/public/well-known/security.txt index f968e44..095f36e 100644 --- a/apps/web/public/.well-known/security.txt +++ b/apps/web/public/well-known/security.txt @@ -2,4 +2,4 @@ Contact: mailto:devbridgeenquirz@gmail.com Expires: 2027-12-31T23:59:59.000Z Preferred-Languages: en Canonical: https://tokenforge-dev.vercel.app/.well-known/security.txt -Policy: https://github.com/logusivam/tokenforge/blob/main/SECURITY.md +Policy: https://github.com/logusivam/tokenforge/blob/dev/SECURITY.md diff --git a/apps/web/vercel.json b/apps/web/vercel.json index 0156eeb..e0853f6 100644 --- a/apps/web/vercel.json +++ b/apps/web/vercel.json @@ -2,7 +2,11 @@ "cleanUrls": true, "rewrites": [ { - "source": "/((?!assets/|robots\\.txt|sitemap\\.xml|\\.well-known/|.*\\.(?:png|jpg|jpeg|gif|svg|ico|txt|js|css)$).*)", + "source": "/.well-known/security.txt", + "destination": "/well-known/security.txt" + }, + { + "source": "/((?!assets/|robots\\.txt|sitemap\\.xml|well-known/|.*\\.(?:png|jpg|jpeg|gif|svg|ico|txt|js|css)$).*)", "destination": "/index.html" } ] diff --git a/package.json b/package.json index 88c69f7..ff57c8d 100644 --- a/package.json +++ b/package.json @@ -5,7 +5,7 @@ "description": "JWT auth system with refresh token rotation, OAuth2 PKCE, and RBAC — built from scratch", "author": "Loganathan ", "license": "MIT", - "homepage": "https://tokenforge.dev", + "homepage": "https://tokenforge-dev.vercel.app", "repository": { "type": "git", "url": "https://github.com/logusivam/tokenforge.git" diff --git a/vercel.json b/vercel.json index 0156eeb..e0853f6 100644 --- a/vercel.json +++ b/vercel.json @@ -2,7 +2,11 @@ "cleanUrls": true, "rewrites": [ { - "source": "/((?!assets/|robots\\.txt|sitemap\\.xml|\\.well-known/|.*\\.(?:png|jpg|jpeg|gif|svg|ico|txt|js|css)$).*)", + "source": "/.well-known/security.txt", + "destination": "/well-known/security.txt" + }, + { + "source": "/((?!assets/|robots\\.txt|sitemap\\.xml|well-known/|.*\\.(?:png|jpg|jpeg|gif|svg|ico|txt|js|css)$).*)", "destination": "/index.html" } ] From 107eb6795978006faa34fb9e43c8c6b4fd6545a7 Mon Sep 17 00:00:00 2001 From: Loganathan G P <106108501+logusivam@users.noreply.github.com> Date: Sat, 1 Aug 2026 15:35:49 +0530 Subject: [PATCH 2/5] fix(release): rename .well-known to bypass vercel block and add rewrite --- CODE_OF_CONDUCT.md | 4 +- apps/web/index.html | 238 ++++++++++-------- apps/web/public/robots.txt | 2 +- apps/web/public/sitemap.xml | 8 +- .../{.well-known => well-known}/security.txt | 2 +- apps/web/vercel.json | 6 +- package.json | 2 +- vercel.json | 6 +- 8 files changed, 148 insertions(+), 120 deletions(-) rename apps/web/public/{.well-known => well-known}/security.txt (70%) diff --git a/CODE_OF_CONDUCT.md b/CODE_OF_CONDUCT.md index 99e2b0a..96f1e3b 100644 --- a/CODE_OF_CONDUCT.md +++ b/CODE_OF_CONDUCT.md @@ -58,8 +58,8 @@ representative at an online or offline event. ## Enforcement Instances of abusive, harassing, or otherwise unacceptable behavior may be -reported to the community leaders at **logusivam26@gmail.com**. All complaints -will be reviewed and investigated promptly and fairly. +reported to the community leaders at **devbridgeenquirz@gmail.com**. All +complaints will be reviewed and investigated promptly and fairly. All community leaders are obligated to respect the privacy and security of the reporter of any incident. diff --git a/apps/web/index.html b/apps/web/index.html index a6aec23..44b3907 100644 --- a/apps/web/index.html +++ b/apps/web/index.html @@ -1,43 +1,48 @@ - - - - - - TokenForge — JWT Auth System Built From Scratch | No Auth0 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - + + + + +
+ + +
+ +
+ + + + - - - - - + }); + + + + \ No newline at end of file diff --git a/apps/web/public/robots.txt b/apps/web/public/robots.txt index fd97494..fda5f4f 100644 --- a/apps/web/public/robots.txt +++ b/apps/web/public/robots.txt @@ -5,4 +5,4 @@ Disallow: /profile Disallow: /dashboard Disallow: /oauth/ -Sitemap: https://tokenforge.dev/sitemap.xml +Sitemap: https://tokenforge-dev.vercel.app/sitemap.xml diff --git a/apps/web/public/sitemap.xml b/apps/web/public/sitemap.xml index b895f18..3a7eff9 100644 --- a/apps/web/public/sitemap.xml +++ b/apps/web/public/sitemap.xml @@ -1,25 +1,25 @@ - https://tokenforge.dev/ + https://tokenforge-dev.vercel.app/ 2026-07-22 monthly 1.0 - https://tokenforge.dev/login + https://tokenforge-dev.vercel.app/login 2026-07-22 monthly 0.8 - https://tokenforge.dev/register + https://tokenforge-dev.vercel.app/register 2026-07-22 monthly 0.8 - https://tokenforge.dev/terms-of-service + https://tokenforge-dev.vercel.app/terms-of-service 2026-07-22 yearly 0.3 diff --git a/apps/web/public/.well-known/security.txt b/apps/web/public/well-known/security.txt similarity index 70% rename from apps/web/public/.well-known/security.txt rename to apps/web/public/well-known/security.txt index f968e44..095f36e 100644 --- a/apps/web/public/.well-known/security.txt +++ b/apps/web/public/well-known/security.txt @@ -2,4 +2,4 @@ Contact: mailto:devbridgeenquirz@gmail.com Expires: 2027-12-31T23:59:59.000Z Preferred-Languages: en Canonical: https://tokenforge-dev.vercel.app/.well-known/security.txt -Policy: https://github.com/logusivam/tokenforge/blob/main/SECURITY.md +Policy: https://github.com/logusivam/tokenforge/blob/dev/SECURITY.md diff --git a/apps/web/vercel.json b/apps/web/vercel.json index 0156eeb..e0853f6 100644 --- a/apps/web/vercel.json +++ b/apps/web/vercel.json @@ -2,7 +2,11 @@ "cleanUrls": true, "rewrites": [ { - "source": "/((?!assets/|robots\\.txt|sitemap\\.xml|\\.well-known/|.*\\.(?:png|jpg|jpeg|gif|svg|ico|txt|js|css)$).*)", + "source": "/.well-known/security.txt", + "destination": "/well-known/security.txt" + }, + { + "source": "/((?!assets/|robots\\.txt|sitemap\\.xml|well-known/|.*\\.(?:png|jpg|jpeg|gif|svg|ico|txt|js|css)$).*)", "destination": "/index.html" } ] diff --git a/package.json b/package.json index c1825f1..fb290a5 100644 --- a/package.json +++ b/package.json @@ -5,7 +5,7 @@ "description": "JWT auth system with refresh token rotation, OAuth2 PKCE, and RBAC — built from scratch", "author": "Loganathan ", "license": "MIT", - "homepage": "https://tokenforge.dev", + "homepage": "https://tokenforge-dev.vercel.app", "repository": { "type": "git", "url": "https://github.com/logusivam/tokenforge.git" diff --git a/vercel.json b/vercel.json index 0156eeb..e0853f6 100644 --- a/vercel.json +++ b/vercel.json @@ -2,7 +2,11 @@ "cleanUrls": true, "rewrites": [ { - "source": "/((?!assets/|robots\\.txt|sitemap\\.xml|\\.well-known/|.*\\.(?:png|jpg|jpeg|gif|svg|ico|txt|js|css)$).*)", + "source": "/.well-known/security.txt", + "destination": "/well-known/security.txt" + }, + { + "source": "/((?!assets/|robots\\.txt|sitemap\\.xml|well-known/|.*\\.(?:png|jpg|jpeg|gif|svg|ico|txt|js|css)$).*)", "destination": "/index.html" } ] From 5f662180b195db14bde565bab13b132e8d982d7c Mon Sep 17 00:00:00 2001 From: Loganathan G P <106108501+logusivam@users.noreply.github.com> Date: Sat, 1 Aug 2026 17:00:37 +0530 Subject: [PATCH 3/5] fix(ci): use custom GH_PAT to bypass branch ruleset on release --- .github/workflows/release.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index ed03dd1..39f9124 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -23,4 +23,4 @@ jobs: - run: npm ci - run: npx semantic-release env: - GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} + GITHUB_TOKEN: ${{ secrets.GH_PAT || secrets.GITHUB_TOKEN }} From 5d63e000d66abd6c81518513f1dd6e89e569dc7d Mon Sep 17 00:00:00 2001 From: Loganathan G P <106108501+logusivam@users.noreply.github.com> Date: Sat, 1 Aug 2026 17:00:37 +0530 Subject: [PATCH 4/5] fix(ci): use custom GH_PAT to bypass branch ruleset on release --- .github/workflows/release.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index ed03dd1..39f9124 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -23,4 +23,4 @@ jobs: - run: npm ci - run: npx semantic-release env: - GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} + GITHUB_TOKEN: ${{ secrets.GH_PAT || secrets.GITHUB_TOKEN }} From 9c081fca607ecd31d996c9bb6eda4b580e2300a1 Mon Sep 17 00:00:00 2001 From: Loganathan G P <106108501+logusivam@users.noreply.github.com> Date: Sat, 1 Aug 2026 17:38:47 +0530 Subject: [PATCH 5/5] feat: add semantic release workflow for automated versioning and changelog generation --- .github/workflows/release.yml | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 39f9124..0784372 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -16,6 +16,7 @@ jobs: - uses: actions/checkout@v4 with: fetch-depth: 0 # Full history for changelog generation + token: ${{ secrets.GH_PAT }} - uses: actions/setup-node@v4 with: node-version: '22' @@ -23,4 +24,4 @@ jobs: - run: npm ci - run: npx semantic-release env: - GITHUB_TOKEN: ${{ secrets.GH_PAT || secrets.GITHUB_TOKEN }} + GITHUB_TOKEN: ${{ secrets.GH_PAT}}