mteehan 4bd4c374fd fix: send WS JWT as bare subprotocol name; CSSOM inline styles; open mgmt services on public zone ...

- websocket.js passes the raw JWT as the Sec-WebSocket-Protocol subprotocol (no 'Bearer ' prefix): subprotocol names must be valid RFC 6455 tokens, and the space in 'Bearer <token>' made the browser reject the constructor with a SyntaxError.
- daemon accepts a JWT-shaped subprotocol plus the legacy 'Bearer <token>' form via _extract_ws_token; unit tests in tests/test_ws_auth.py.
- vdom.js applies inline styles through el.style (CSSOM) instead of setAttribute, which the management-domain CSP (no 'unsafe-inline') blocks.
- install.sh opens http/https/ssh on the public zone alongside WAN setup.
- docs (hoover.md, security.md) updated to match.

2026-08-18 13:36:55 +00:00

..

bootstrap_auth.py

fix: seed builtin admin only on empty DB; recover page-load sessions with one refresh

2026-08-18 00:00:09 +00:00

install.sh

fix: send WS JWT as bare subprotocol name; CSSOM inline styles; open mgmt services on public zone

2026-08-18 13:36:55 +00:00

restart-services.sh

Add restart-services script to scripts/ directory

2026-07-02 14:39:35 +00:00

update-vendor.sh

rename vendor files to put extension after version string

2026-07-02 04:01:52 +00:00