Gan, Jimmy 7b17a53cab fix: resolve terminal WebSocket auth failures and improve reconnection ...

- Remove insecure query token parameter from backend (cookie-only auth)
- Add detailed JWT error logging (expired, invalid, missing tokens)
- Force token refresh before first WebSocket connection
- Stop reconnection after 3 consecutive auth failures
- Increase ping interval from 12s to 30s (reduce traffic)
- Increase pong timeout from 5s to 10s (handle network latency)
- Show attempt counter in reconnection error messages

Root cause: Frontend was reconnecting with 6-day-old expired token,
causing 403 rejections. Now ensures fresh cookies before connecting.

2026-03-13 22:26:22 +08:00

..

routers

fix: resolve terminal WebSocket auth failures and improve reconnection

2026-03-13 22:26:22 +08:00

auth.py

fix: harden dashboard RBAC and cookie auth flows

2026-03-09 23:44:23 +08:00

config.py

fix: change WebAuthn RP_ID to jimmygan.com to support all subdomains

2026-03-11 01:43:19 +08:00

main.py

fix: harden dashboard RBAC and cookie auth flows

2026-03-09 23:44:23 +08:00

rbac.py

fix: harden dashboard auth and terminal flows

2026-03-06 23:53:58 +08:00

requirements.txt

feat: integrate Authelia SSO and update LLDAP routing

2026-02-27 23:04:57 +08:00