 Gan, Jimmy
|
9683cd3165
|
Add security improvements: refresh tokens, passkeys, CSP, audit logging, TOTP encryption
Deploy Dashboard / deploy (push) Successful in 1m26s
- Shorten access token to 30min with 7-day refresh token flow
- Add WebAuthn passkey registration and login with TOTP fallback
- Add Content-Security-Policy header
- Add audit logging middleware to /volume1/docker/nas-dashboard/audit.log
- Block /volume1/docker/ in files endpoint
- Encrypt TOTP secret at rest with Fernet (derived from SECRET_KEY)
- New deps: py_webauthn, cryptography
|
2026-02-22 11:04:40 +08:00 |
|
|
Gan, Jimmy
|
27cab6b8d0
|
Add mobile responsive sidebar, OpenClaw route
Deploy Dashboard / deploy (push) Failing after 3m30s
|
2026-02-20 00:15:36 +08:00 |
|
|
Gan, Jimmy
|
bf49e13e56
|
Add settings page with change password, fix terminal ws bug
Deploy Dashboard / deploy (push) Failing after 2m5s
|
2026-02-19 17:29:03 +08:00 |
|
|
Gan, Jimmy
|
651bc0580e
|
Phase 7: Auth & Security upgrade (JWT, 2FA, Login UI)
|
2026-02-19 03:47:48 +08:00 |
|
|
Gan, Jimmy
|
f3db7d3654
|
Dashboard UI overhaul: modern design with system stats, SVG icons, Inter font, theme toggle, loading states, and log modal
|
2026-02-19 02:29:25 +08:00 |
|
|
Gan, Jimmy
|
70aa421d7f
|
Add NAS dashboard MVP: Docker mgmt, Gitea, Files, Terminal
|
2026-02-19 01:59:50 +08:00 |
|