jimmy/nas-tools
1
0
Fork 0
Code Issues Pull Requests 2 Actions Packages Projects Releases Wiki Activity
Files
888d3e5c495abad38a8661c25f24dee658e5366a
nas-tools/dashboard/backend
T
History
Gan, Jimmy 9683cd3165
Deploy Dashboard / deploy (push) Successful in 1m26s
Details
Add security improvements: refresh tokens, passkeys, CSP, audit logging, TOTP encryption 
- Shorten access token to 30min with 7-day refresh token flow
- Add WebAuthn passkey registration and login with TOTP fallback
- Add Content-Security-Policy header
- Add audit logging middleware to /volume1/docker/nas-dashboard/audit.log
- Block /volume1/docker/ in files endpoint
- Encrypt TOTP secret at rest with Fernet (derived from SECRET_KEY)
- New deps: py_webauthn, cryptography
2026-02-22 11:04:40 +08:00
..
routers
Add security improvements: refresh tokens, passkeys, CSP, audit logging, TOTP encryption
2026-02-22 11:04:40 +08:00
auth.py
Add security improvements: refresh tokens, passkeys, CSP, audit logging, TOTP encryption
2026-02-22 11:04:40 +08:00
config.py
Add security improvements: refresh tokens, passkeys, CSP, audit logging, TOTP encryption
2026-02-22 11:04:40 +08:00
main.py
Add security improvements: refresh tokens, passkeys, CSP, audit logging, TOTP encryption
2026-02-22 11:04:40 +08:00
requirements.txt
Add security improvements: refresh tokens, passkeys, CSP, audit logging, TOTP encryption
2026-02-22 11:04:40 +08:00