mteehan 76300e281f security: harden builtin admin pwd logging and fix auth token persistence ...

- Truncate admin password in logs; write full password to data/auth.log (0o600)
- Persist access token in sessionStorage so it survives page reloads
- Simplify tryRefreshToken to use GSAP-style promise deduplication
- Remove spurious POST redirect on 401 during token refresh
- Guard passkey button reference in login finally block

2026-08-12 14:54:07 +00:00

..

backends.js

Remove query-string cache-busting from static assets

2026-07-28 13:50:22 +00:00

certs.js

refactor: extract shared utilities and standardize page patterns

2026-07-28 17:32:51 +00:00

dashboard.js

refactor: extract shared utilities and standardize page patterns

2026-07-28 17:32:51 +00:00

dhcp.js

fix: dhcp auto-sync UI refresh, users.js null guard, and login toast escaping

2026-08-12 01:46:00 +00:00

interfaces.js

Remove query-string cache-busting from static assets

2026-07-28 13:50:22 +00:00

login.js

security: harden builtin admin pwd logging and fix auth token persistence

2026-08-12 14:54:07 +00:00

logs.js

Remove query-string cache-busting from static assets

2026-07-28 13:50:22 +00:00

nat.js

Remove query-string cache-busting from static assets

2026-07-28 13:50:22 +00:00

notfound.js

Remove query-string cache-busting from static assets

2026-07-28 13:50:22 +00:00

passkeys.js

auth: make session binding optional, enforce WebAuthn credential ownership

2026-08-12 14:16:49 +00:00

proxy.js

fix: harden auth and fix frontend issues

2026-07-28 18:52:03 +00:00

rules.js

Remove query-string cache-busting from static assets

2026-07-28 13:50:22 +00:00

users.js

fix: dhcp auto-sync UI refresh, users.js null guard, and login toast escaping

2026-08-12 01:46:00 +00:00

wireguard.js

refactor: extract shared utilities and standardize page patterns

2026-07-28 17:32:51 +00:00

zones.js

Remove query-string cache-busting from static assets

2026-07-28 13:50:22 +00:00