jimmy/nas-tools

Fork 0

Files

T

History

Gan, Jimmy 69cc62a931

Run Tests / Backend Tests (push) Successful in 2m38s

Details

Run Tests / Test Summary (push) Failing after 17s

Details

Deploy Dashboard (Dev) / deploy-dev (push) Successful in 2m6s

Details

Run Tests / Frontend Tests (push) Failing after 1m55s

Details

security: strengthen TOTP replay protection (issue #4 )

HIGH: Previous implementation used 30-second timestamp windows, allowing
TOTP codes to be reused multiple times within the same window via concurrent
requests or brute force attacks.

Changes:
- Track individual used codes instead of timestamps
- Store last 5 used codes with expiration (90 seconds)
- Reduce acceptance window to ±30s (valid_window=1)
- Automatically clean up expired codes

Security Impact:
- Prevents TOTP code reuse attacks
- Blocks brute force attempts within time windows
- Strengthens 2FA protection significantly

Tests: All TOTP tests passing, replay protection verified

2026-04-08 01:04:33 +08:00

backend

security: strengthen TOTP replay protection (issue #4 )

2026-04-08 01:04:33 +08:00

frontend

fix: add compilerOptions to Svelte plugin in vitest config

2026-04-08 00:47:31 +08:00

.env.example

Add OpenClaw, backup automation, health checks, Telegram notifications

2026-02-19 21:40:34 +08:00

deploy.sh

Use docker save/load for cross-build deploy from M1 to NAS