facda4eadd
Clean up: remove stale scripts/docs, fix debug prints, update PLAN.md
Deploy Dashboard / deploy (push) Successful in 37s
2026-02-24 10:14:48 +08:00
ffac6f47bf
Show passkey names and dates, add individual delete
Deploy Dashboard / deploy (push) Successful in 31s
2026-02-22 12:20:05 +08:00
9683cd3165
Add security improvements: refresh tokens, passkeys, CSP, audit logging, TOTP encryption
...
Deploy Dashboard / deploy (push) Successful in 1m26s
- Shorten access token to 30min with 7-day refresh token flow
- Add WebAuthn passkey registration and login with TOTP fallback
- Add Content-Security-Policy header
- Add audit logging middleware to /volume1/docker/nas-dashboard/audit.log
- Block /volume1/docker/ in files endpoint
- Encrypt TOTP secret at rest with Fernet (derived from SECRET_KEY)
- New deps: py_webauthn, cryptography
2026-02-22 11:04:40 +08:00
c5fcb9bc64
Add CORS, rate limiting, security headers, and files endpoint protection
Deploy Dashboard / deploy (push) Successful in 18s
2026-02-21 11:18:29 +08:00
9fcce3a0a8
Fix proxy env bug in Telegram alert
Deploy Dashboard / deploy (push) Failing after 2m7s
2026-02-20 22:21:16 +08:00
18605926ca
security: remove hardcoded secrets, add health endpoint, add security headers
2026-02-20 22:04:01 +08:00
b2c27683e3
Fix session expiry: use config value, increase to 7 days
...
Deploy Dashboard / deploy (push) Failing after 6m38s
- LOGIN was ignoring ACCESS_TOKEN_EXPIRE_MINUTES (hardcoded 15min default)
- Pass expires_delta from config in login route
- Increase token lifetime from 30min to 7 days
2026-02-19 19:44:30 +08:00
bf49e13e56
Add settings page with change password, fix terminal ws bug
Deploy Dashboard / deploy (push) Failing after 2m5s
2026-02-19 17:29:03 +08:00
651bc0580e
Phase 7: Auth & Security upgrade (JWT, 2FA, Login UI)
2026-02-19 03:47:48 +08:00
Gan, Jimmy