Eduardo Silva
|
ca63b87123
|
implement CSRF protection by adding token generation, validation, and cookie management in login flows
|
2026-03-16 20:23:18 -03:00 |
|
Eduardo Silva
|
ebbffca21d
|
validate path prefix in form cleaning process to ensure proper formatting and prevent invalid characters
|
2026-03-16 20:23:05 -03:00 |
|
Eduardo Silva
|
a9bfcac771
|
enhance security by sanitizing headers and preventing open redirects
|
2026-03-16 19:53:05 -03:00 |
|
Eduardo Silva
|
4c109957e9
|
enhance security by adding HTTP security headers and disabling OpenAPI documentation
|
2026-03-16 19:49:11 -03:00 |
|
Eduardo Silva
|
76048593f1
|
refactor login flow to use context path for redirects and enhance path normalization to prevent traversal bypasses
|
2026-03-16 19:47:48 -03:00 |
|
Eduardo Silva
|
bf1991457a
|
enhance security by enforcing strict SameSite cookies, validating OIDC callback host, and improving path matching logic
|
2026-03-16 19:35:24 -03:00 |
|
Eduardo Silva
|
3a8d807665
|
remove exclusion of reserved application names from route data
|
2026-03-16 17:37:51 -03:00 |
|
Eduardo Silva
|
058086c943
|
add support for displaying Django hostnames in application details
|
2026-03-16 17:29:39 -03:00 |
|
Eduardo Silva
|
ceb9c2395a
|
add validation to prevent deletion of authentication methods in use by access policies
|
2026-03-16 17:24:57 -03:00 |
|
Eduardo Silva
|
29d1621152
|
add reserved application checks to prevent modification and deletion
|
2026-03-16 17:24:20 -03:00 |
|
Eduardo Silva
|
9e4da484fe
|
add default entries creation on post-migrate signal and refactor application model logic
|
2026-03-16 17:08:50 -03:00 |
|
Eduardo Silva
|
a496ba2c63
|
add django admin views
|
2026-03-16 16:37:03 -03:00 |
|
Eduardo Silva
|
51a2535e87
|
add display_name field to models and update related forms and templates
|
2026-03-16 16:33:12 -03:00 |
|
Eduardo Silva
|
c912e7bb5f
|
remove TOTP selection rule requiring combination with Local Password or OIDC authentication
|
2026-03-16 15:59:19 -03:00 |
|
Eduardo Silva
|
c02abf335e
|
add temporary error message for unavailable OIDC authentication in forms
|
2026-03-16 15:59:05 -03:00 |
|
Eduardo Silva
|
4c57f43f4b
|
run caddy in wireguard network namespace to access VPN routes
|
2026-03-16 14:51:36 -03:00 |
|
Eduardo Silva
|
5cadfba3b7
|
add allow_invalid_cert field to application model and update related forms and config processing
|
2026-03-16 14:27:03 -03:00 |
|
Eduardo Silva
|
c707d278f3
|
add error handling for policy configuration issues in authentication
|
2026-03-16 14:16:28 -03:00 |
|
Eduardo Silva
|
e1f128f217
|
implement rate limiting for authentication routes and add custom error handling page
|
2026-03-16 13:42:20 -03:00 |
|
Eduardo Silva
|
685b4eb971
|
refactor templates to extend base layout and improve styling
|
2026-03-16 11:58:48 -03:00 |
|
Eduardo Silva
|
66a3895eff
|
enhance logging and error handling in authentication process
|
2026-03-16 11:26:16 -03:00 |
|
Eduardo Silva
|
a68820fd98
|
add session management routes and session page template
|
2026-03-16 10:34:10 -03:00 |
|
Eduardo Silva
|
59ca60c642
|
update libs
|
2026-03-16 10:18:46 -03:00 |
|
Eduardo Silva
|
76326aded7
|
update libs
|
2026-03-16 10:14:52 -03:00 |
|
Eduardo Silva
|
684c416049
|
adminlte cleanup
|
2026-03-16 09:58:29 -03:00 |
|
Eduardo Silva
|
27311e5ce9
|
remove package-lock.json from adminlte
|
2026-03-16 09:54:12 -03:00 |
|
Eduardo Silva
|
6591eca65b
|
add session expiration fields to auth method form and model
|
2026-03-16 09:49:29 -03:00 |
|
Eduardo Silva
|
491e78efdb
|
move from authelia implementation to custom authentication gateway
|
2026-03-16 09:49:17 -03:00 |
|
Eduardo Silva
|
d84cf0a174
|
add initial implementation of auth gateway with models, routes, and session management
|
2026-03-16 09:47:02 -03:00 |
|
Eduardo Silva
|
963ed54c86
|
update translations
|
2026-03-15 17:31:19 -03:00 |
|
Eduardo Silva
|
a6de7fb3d0
|
update translations
|
2026-03-15 17:21:24 -03:00 |
|
Eduardo Silva
|
14bd4e8ccc
|
add TOTP authentication method rules and display in user list
|
2026-03-15 17:20:18 -03:00 |
|
Eduardo Silva
|
01da3c9de0
|
update user list link activation logic in sidebar
|
2026-03-15 17:11:29 -03:00 |
|
Eduardo Silva
|
2386d8fbb3
|
add password and TOTP PIN fields to user form with validation and QR code generation
|
2026-03-15 17:08:58 -03:00 |
|
Eduardo Silva
|
75d4fb022b
|
add TOTP secret generation button and update help text for TOTP authentication
|
2026-03-15 16:49:54 -03:00 |
|
Eduardo Silva
|
218bd32e93
|
refactor session cookie handling for Authelia integration
|
2026-03-15 16:30:28 -03:00 |
|
Eduardo Silva
|
e8622f84a8
|
add argon2-cffi and PyYAML to requirements
|
2026-03-15 16:30:16 -03:00 |
|
Eduardo Silva
|
517bd14bdb
|
remove unused TOTP field and update user model constraints
|
2026-03-15 16:29:20 -03:00 |
|
Eduardo Silva
|
6b70701c9c
|
refactor Caddyfile generation to improve policy handling and cookie collection
|
2026-03-15 11:37:25 -03:00 |
|
Eduardo Silva
|
8d5e80758d
|
improved debug export for caddy
|
2026-03-15 11:12:58 -03:00 |
|
Eduardo Silva
|
1a71dc4eb3
|
add conditional export of Caddy config for DEBUG mode
|
2026-03-15 11:08:09 -03:00 |
|
Eduardo Silva
|
a5ab2f65e8
|
update Authelia internal URL
|
2026-03-15 10:57:56 -03:00 |
|
Eduardo Silva
|
c9c7355ab5
|
update ignore rules
|
2026-03-15 10:57:31 -03:00 |
|
Eduardo Silva
|
715332f384
|
refactor Authelia setup and configuration handling
|
2026-03-15 10:16:26 -03:00 |
|
Eduardo Silva
|
f2c00d59ee
|
increase wait interval for Authelia configuration file check
|
2026-03-14 23:01:32 -03:00 |
|
Eduardo Silva
|
b02f7fcc87
|
add Caddy and Authelia support with configuration scripts and Docker setup
|
2026-03-14 22:56:47 -03:00 |
|
Eduardo Silva
|
d0f0b6eb74
|
update translations
|
2026-03-14 12:09:11 -03:00 |
|
Eduardo Silva
|
b2111f77a1
|
update translations
|
2026-03-14 11:59:42 -03:00 |
|
Eduardo Silva
|
5330bde3f5
|
update translations
|
2026-03-14 11:55:15 -03:00 |
|
Eduardo Silva
|
ac87874b8a
|
add export configuration feature for Caddy
|
2026-03-14 11:54:49 -03:00 |
|