fix: harden dashboard auth and RBAC security flows #33

Merged

jimmy merged 1 commits from dev into main

2026-03-09 23:53:52 +08:00

Author	SHA1	Message	Date
Gan, Jimmy	4201917e17	fix: harden dashboard RBAC and cookie auth flows Deploy Dashboard (Dev) / deploy-dev (push) Successful in 2m17s Details Restrict Docker/Files writes to admins, move terminal websocket auth to cookie-first with temporary query fallback, and migrate refresh-token handling to httpOnly cookies for safer session persistence. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-03-09 23:44:23 +08:00

Author

SHA1

Message

Date

Gan, Jimmy

4201917e17

fix: harden dashboard RBAC and cookie auth flows

Deploy Dashboard (Dev) / deploy-dev (push) Successful in 2m17s

Details

Restrict Docker/Files writes to admins, move terminal websocket auth to cookie-first with temporary query fallback, and migrate refresh-token handling to httpOnly cookies for safer session persistence.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-03-09 23:44:23 +08:00

fix: harden dashboard auth and RBAC security flows #33

1 Commits