Gan, Jimmy 4201917e17 fix: harden dashboard RBAC and cookie auth flows ...

Restrict Docker/Files writes to admins, move terminal websocket auth to cookie-first with temporary query fallback, and migrate refresh-token handling to httpOnly cookies for safer session persistence.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-03-09 23:44:23 +08:00

..

routers

fix: harden dashboard RBAC and cookie auth flows

2026-03-09 23:44:23 +08:00

auth.py

fix: harden dashboard RBAC and cookie auth flows

2026-03-09 23:44:23 +08:00

config.py

fix: harden dashboard auth and terminal flows

2026-03-06 23:53:58 +08:00

main.py

fix: harden dashboard RBAC and cookie auth flows

2026-03-09 23:44:23 +08:00

rbac.py

fix: harden dashboard auth and terminal flows

2026-03-06 23:53:58 +08:00

requirements.txt

feat: integrate Authelia SSO and update LLDAP routing

2026-02-27 23:04:57 +08:00