mteehan e01574c67e auth: make session binding optional, enforce WebAuthn credential ownership ...

- Make session_id parameter optional in validate_token — only enforced when
  provided, allowing WebSocket auth which cannot carry custom headers
- Remove decode_token round-trip from daemon WS handler
- Override WebAuthn registration username from JWT user_ctx to prevent users
  from registering credentials under another user's account
- Frontend no longer sends username for WebAuthn registration
- Redirect to login on 401 after token refresh fails for POST requests
- Remove redundant auth session check from login page load
- Add tests for session_id semantics and WebAuthn ownership guard

2026-08-12 14:16:49 +00:00

..

__init__.py

Initial commit: SSL proxy / firewall appliance

2026-05-07 22:24:24 +00:00

acme.py

docs: update documentation and project structure

2026-07-02 14:41:02 +00:00

auth_users.py

fix auth: validate logout body, harden WebAuthn, optimize list_users

2026-08-12 03:58:54 +00:00

auth.py

auth: make session binding optional, enforce WebAuthn credential ownership

2026-08-12 14:16:49 +00:00

common.py

feat: add auth subsystem with WebAuthn passkeys support

2026-07-24 01:21:39 +00:00

db_sqlite.py

fix auth: validate logout body, harden WebAuthn, optimize list_users

2026-08-12 03:58:54 +00:00

db.py

fix auth: validate logout body, harden WebAuthn, optimize list_users

2026-08-12 03:58:54 +00:00

dnsmasq.py

Add update-vendor.sh symlink support, unify install.sh vendor flow

2026-07-01 00:55:03 +00:00

firewall.py

Add update-vendor.sh symlink support, unify install.sh vendor flow

2026-07-01 00:55:03 +00:00

logging.py

docs: add comprehensive docstrings and inline comments

2026-07-13 17:26:45 +00:00

network.py

docs: add comprehensive docstrings and inline comments

2026-07-13 17:26:45 +00:00

nginx.py

Auth: rate limiter, WebAuthn domain awareness, misc fixes

2026-07-29 02:48:53 +00:00

password.py

feat: add auth subsystem with WebAuthn passkeys support

2026-07-24 01:21:39 +00:00

state.py

WireGuard access classes, firewall nftables fixes, network sync event refactor

2026-07-20 03:57:16 +00:00

sync.py

WireGuard access classes, firewall nftables fixes, network sync event refactor

2026-07-20 03:57:16 +00:00

system_import.py

feat: add system metrics dashboard with resource monitoring

2026-07-15 00:24:43 +00:00

webauthn.py

fix auth: validate logout body, harden WebAuthn, optimize list_users

2026-08-12 03:58:54 +00:00

wireguard.py

WireGuard access classes, firewall nftables fixes, network sync event refactor

2026-07-20 03:57:16 +00:00