0xJacky
fb37c94276
feat: implement short token endpoint for WebSocket authentication
...
- Added `InitTokenRouter` to define the `/token/short` endpoint for issuing short tokens.
- Created `IssueShortToken` function to handle short token generation and response.
- Updated WebSocket middleware to require short token for authentication, preventing CSWSH attacks.
- Modified user store and login handling to integrate short token functionality.
- Enhanced documentation to reflect changes in WebSocket security requirements.
2026-04-02 00:06:04 +08:00
0xJacky
b06cce311a
fix: correct recovery code verification logic in OTP handling
2026-03-15 19:18:03 +08:00
0xJacky
7b66578adb
chore(deps): update various dependencies
2026-03-14 15:25:18 +00:00
0xJacky
ccedb94880
chore: clean up codes
2025-10-03 14:33:07 +08:00
0xJacky
1626c6117b
perf: optimize indexer config for multi-core systems
2025-09-08 09:36:07 +08:00
0xJacky
16a4f5c39f
chore: update translations and session tab logic
2025-09-06 13:00:49 +08:00
0xJacky
618ff5c99c
feat(nginx-log): hybrid progress calculation and dynamic estimation
2025-08-26 12:03:48 +08:00
0xJacky
03fbd9be4c
perf: introduced cache for user, site_config, node
2025-08-25 18:50:44 +08:00
Jacky
a3f8f90668
feat(auth): implement short token for user authentication and update related login responses
2025-07-03 10:10:05 +00:00
Jacky
08b497acd1
feat(user): add default user initialization
2025-07-02 19:51:22 +08:00
Jacky
d1d13b620f
feat(cli): reset init user password
2025-03-03 03:40:09 +00:00
Jacky
ab46d1de7e
refactor: notification module
2025-02-25 19:06:39 +08:00
Hintay
5d5bac2e25
feat(otp): add notification for when all recovery codes are used
2025-02-11 02:47:53 +09:00
Hintay
5ade465ac6
feat(otp): encrypt recovery codes with AES
2025-02-10 23:21:52 +09:00
Hintay
9184711d43
feat: validate new recovery code
2025-02-10 14:44:01 +09:00
Jacky
465eae9858
refactor: user curd
2025-01-31 23:11:14 +08:00
Jacky
80f01e61d3
Merge pull request #831 from caisi35/dev
...
fix duplicate user and attempts
2025-01-31 21:33:41 +08:00
caisi35
8ffe29de78
fix(user):"Attempts" create and update to 2
2025-01-24 17:30:27 +08:00
Jacky
650196d06a
enhance(wip): error handle
2025-01-24 16:41:35 +08:00
Jacky
7ad5cac3b8
feat(wip): site category
2024-10-26 10:39:31 +08:00
Jacky
a93938eedb
refactor(jwt): migrate jwt to v5
2024-10-24 19:17:59 +08:00
Jacky
33a996e777
refactor: migrate to new cosy
2024-10-22 16:38:38 +08:00
Jacky
0a6a7693a1
feat: 2fa via passkey
2024-09-16 11:18:14 +08:00
Jacky
bdfbbd0e8f
feat: login via passkey
2024-09-15 20:32:03 +08:00
Jacky
3a035e9930
chore: update deps
2024-07-26 23:28:18 +08:00
Jacky
3a22861640
feat: 2FA authorization for web terminal
2024-07-23 20:35:32 +08:00
Jacky
5abd9b75bb
feat: login 2fa
2024-07-23 17:28:13 +08:00
Jacky
cff843b82b
feat: add login failed ban ip list
2024-07-21 15:35:23 +08:00
Jacky
3b937ee0f4
feat: add ip whitelist
2024-07-20 10:37:19 +08:00