Commit Graph

29 Commits

Author SHA1 Message Date
0xJacky
fb37c94276 feat: implement short token endpoint for WebSocket authentication
- Added `InitTokenRouter` to define the `/token/short` endpoint for issuing short tokens.
- Created `IssueShortToken` function to handle short token generation and response.
- Updated WebSocket middleware to require short token for authentication, preventing CSWSH attacks.
- Modified user store and login handling to integrate short token functionality.
- Enhanced documentation to reflect changes in WebSocket security requirements.
2026-04-02 00:06:04 +08:00
0xJacky
b06cce311a fix: correct recovery code verification logic in OTP handling 2026-03-15 19:18:03 +08:00
0xJacky
7b66578adb chore(deps): update various dependencies 2026-03-14 15:25:18 +00:00
0xJacky
ccedb94880 chore: clean up codes 2025-10-03 14:33:07 +08:00
0xJacky
1626c6117b perf: optimize indexer config for multi-core systems 2025-09-08 09:36:07 +08:00
0xJacky
16a4f5c39f chore: update translations and session tab logic 2025-09-06 13:00:49 +08:00
0xJacky
618ff5c99c feat(nginx-log): hybrid progress calculation and dynamic estimation 2025-08-26 12:03:48 +08:00
0xJacky
03fbd9be4c perf: introduced cache for user, site_config, node 2025-08-25 18:50:44 +08:00
Jacky
a3f8f90668 feat(auth): implement short token for user authentication and update related login responses 2025-07-03 10:10:05 +00:00
Jacky
08b497acd1 feat(user): add default user initialization 2025-07-02 19:51:22 +08:00
Jacky
d1d13b620f feat(cli): reset init user password 2025-03-03 03:40:09 +00:00
Jacky
ab46d1de7e refactor: notification module 2025-02-25 19:06:39 +08:00
Hintay
5d5bac2e25 feat(otp): add notification for when all recovery codes are used 2025-02-11 02:47:53 +09:00
Hintay
5ade465ac6 feat(otp): encrypt recovery codes with AES 2025-02-10 23:21:52 +09:00
Hintay
9184711d43 feat: validate new recovery code 2025-02-10 14:44:01 +09:00
Jacky
465eae9858 refactor: user curd 2025-01-31 23:11:14 +08:00
Jacky
80f01e61d3 Merge pull request #831 from caisi35/dev
fix duplicate user and attempts
2025-01-31 21:33:41 +08:00
caisi35
8ffe29de78 fix(user):"Attempts" create and update to 2 2025-01-24 17:30:27 +08:00
Jacky
650196d06a enhance(wip): error handle 2025-01-24 16:41:35 +08:00
Jacky
7ad5cac3b8 feat(wip): site category 2024-10-26 10:39:31 +08:00
Jacky
a93938eedb refactor(jwt): migrate jwt to v5 2024-10-24 19:17:59 +08:00
Jacky
33a996e777 refactor: migrate to new cosy 2024-10-22 16:38:38 +08:00
Jacky
0a6a7693a1 feat: 2fa via passkey 2024-09-16 11:18:14 +08:00
Jacky
bdfbbd0e8f feat: login via passkey 2024-09-15 20:32:03 +08:00
Jacky
3a035e9930 chore: update deps 2024-07-26 23:28:18 +08:00
Jacky
3a22861640 feat: 2FA authorization for web terminal 2024-07-23 20:35:32 +08:00
Jacky
5abd9b75bb feat: login 2fa 2024-07-23 17:28:13 +08:00
Jacky
cff843b82b feat: add login failed ban ip list 2024-07-21 15:35:23 +08:00
Jacky
3b937ee0f4 feat: add ip whitelist 2024-07-20 10:37:19 +08:00