mteehan 358573567d fix: dual-key rate limiting for auth + websocket reconnect guard ...

- Pass client IP (X-Real-IP header) through Flask to daemon for both
  password login and WebAuthn authenticate-finish endpoints
- Rate limiter now checks both IP and username buckets: IP layer catches
  enumeration/brute-force attacks across multiple usernames; username
  layer protects against single-account targeting from multiple IPs
- Add _wsRefreshing flag to prevent double-scheduling reconnect when
  onclose fires during token refresh; simplify async IIFE to .then()/.catch()
- Reset _wsRefreshing on websocket onopen for safety

2026-07-28 00:54:48 +00:00

..

__init__.py

Initial commit: SSL proxy / firewall appliance

2026-05-07 22:24:24 +00:00

acme.py

docs: update documentation and project structure

2026-07-02 14:41:02 +00:00

auth_users.py

fix: deduplicate token refresh, serialize concurrent attempts, clean up logout path

2026-07-27 19:15:27 +00:00

auth.py

fix: dual-key rate limiting for auth + websocket reconnect guard

2026-07-28 00:54:48 +00:00

common.py

feat: add auth subsystem with WebAuthn passkeys support

2026-07-24 01:21:39 +00:00

db_sqlite.py

fix: harden retry JSON parsing and exempt personal auth routes

2026-07-27 20:38:50 +00:00

db.py

security: harden JWT auth with session binding, CSP headers, and sessionStorage

2026-07-24 03:09:07 +00:00

dnsmasq.py

Add update-vendor.sh symlink support, unify install.sh vendor flow

2026-07-01 00:55:03 +00:00

firewall.py

Add update-vendor.sh symlink support, unify install.sh vendor flow

2026-07-01 00:55:03 +00:00

logging.py

docs: add comprehensive docstrings and inline comments

2026-07-13 17:26:45 +00:00

network.py

docs: add comprehensive docstrings and inline comments

2026-07-13 17:26:45 +00:00

nginx.py

feat: add auth subsystem with WebAuthn passkeys support

2026-07-24 01:21:39 +00:00

password.py

feat: add auth subsystem with WebAuthn passkeys support

2026-07-24 01:21:39 +00:00

state.py

WireGuard access classes, firewall nftables fixes, network sync event refactor

2026-07-20 03:57:16 +00:00

sync.py

WireGuard access classes, firewall nftables fixes, network sync event refactor

2026-07-20 03:57:16 +00:00

system_import.py

feat: add system metrics dashboard with resource monitoring

2026-07-15 00:24:43 +00:00

webauthn.py

feat: add auth subsystem with WebAuthn passkeys support

2026-07-24 01:21:39 +00:00

wireguard.py

WireGuard access classes, firewall nftables fixes, network sync event refactor

2026-07-20 03:57:16 +00:00