mteehan 76300e281f security: harden builtin admin pwd logging and fix auth token persistence ...

- Truncate admin password in logs; write full password to data/auth.log (0o600)
- Persist access token in sessionStorage so it survives page reloads
- Simplify tryRefreshToken to use GSAP-style promise deduplication
- Remove spurious POST redirect on 401 during token refresh
- Guard passkey button reference in login finally block

2026-08-12 14:54:07 +00:00

..

api

auth: make session binding optional, enforce WebAuthn credential ownership

2026-08-12 14:16:49 +00:00

static

security: harden builtin admin pwd logging and fix auth token persistence

2026-08-12 14:54:07 +00:00

__init__.py

Initial commit: SSL proxy / firewall appliance

2026-05-07 22:24:24 +00:00

server.py

enforce mandatory X-Session-Id header for access token validation

2026-07-30 22:55:16 +00:00