Gan, Jimmy 4201917e17 fix: harden dashboard RBAC and cookie auth flows ...

Restrict Docker/Files writes to admins, move terminal websocket auth to cookie-first with temporary query fallback, and migrate refresh-token handling to httpOnly cookies for safer session persistence.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-03-09 23:44:23 +08:00

..

CcConnect.svelte

feat: add cc-connect start/stop controls

2026-03-03 00:11:53 +08:00

ChatSummary.svelte

feat: integrate Authelia SSO and update LLDAP routing

2026-02-27 23:04:57 +08:00

Dashboard.svelte

fix: comprehensive dark mode support across all pages

2026-03-01 14:59:23 +08:00

Docker.svelte

fix: comprehensive dark mode support across all pages

2026-03-01 14:59:23 +08:00

Files.svelte

fix: comprehensive dark mode support across all pages

2026-03-01 14:59:23 +08:00

Gitea.svelte

fix: comprehensive dark mode support across all pages

2026-03-01 14:59:23 +08:00

InfoEngine.svelte

feat: add info engine MVP pipeline and dashboard page

2026-03-02 23:35:10 +08:00

LiteLLM.svelte

feat: add LiteLLM health page to dashboard

2026-03-02 03:50:56 +08:00

Login.svelte

fix: harden dashboard RBAC and cookie auth flows

2026-03-09 23:44:23 +08:00

OpenClaw.svelte

Fix OpenClaw: auto-include gateway token in dashboard link

2026-02-22 18:30:34 +08:00

Security.svelte

fix: clarify blocked security events

2026-03-07 10:36:37 +08:00

Settings.svelte

feat: add role-based sidebar link visibility control

2026-03-01 18:17:45 +08:00

Terminal.svelte

fix: harden dashboard RBAC and cookie auth flows

2026-03-09 23:44:23 +08:00