fix: harden dashboard auth and terminal flows #26

Merged
jimmy merged 1 commits from dev into main 2026-03-07 09:52:54 +08:00
Owner

Summary

  • harden terminal websocket auth and host validation
  • centralize trusted proxy client IP resolution and tighten token exposure
  • make file deletes safer and auth/RBAC file writes atomic
## Summary - harden terminal websocket auth and host validation - centralize trusted proxy client IP resolution and tighten token exposure - make file deletes safer and auth/RBAC file writes atomic
jimmy added 1 commit 2026-03-07 09:52:51 +08:00
fix: harden dashboard auth and terminal flows
Deploy Dashboard (Dev) / deploy-dev (push) Successful in 3m29s
44f0ed5d04
Tighten terminal websocket auth and proxy trust handling while making file-backed auth/RBAC writes atomic to reduce high-impact security and persistence risks.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
jimmy merged commit 23598a5af1 into main 2026-03-07 09:52:54 +08:00
Sign in to join this conversation.
No Reviewers
No Label
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: jimmy/nas-tools#26