Kai (Tam Nhu) Tran and GitHub
14cbe8fb67
fix(security): reject 127-prefixed websocket origins ( #1263 )
...
* fix(security): reject 127-prefixed websocket origins
* style: apply prettier formatting
2026-05-16 13:56:10 -04:00
Kai (Tam Nhu) Tran and GitHub
f09cdfcf2b
fix(security): protect dashboard WebSocket upgrades
2026-05-12 10:42:05 -04:00
Tam Nhu Tran
3af554275e
test: isolate shared-state test suites for CI stability
...
- add dependency injection to export-command, binary-manager,
codex-plan-compatibility, config-command, and usage-syncer
- override process.exit in api-export test to prevent silent
termination in Bun's parallel test runner
- harden test-environment bootstrap with process.env isolation
- fix auth middleware to avoid config upgrade during checks
2026-03-25 16:41:41 -04:00
Tam Nhu Tran
539afea737
style: format source and test files
2026-02-17 17:03:11 +07:00
kaitranntt
464b410e8b
feat(dashboard): add optional login authentication ( #319 )
...
Add session-based username/password auth for CCS dashboard:
- Backend: Express session middleware with bcrypt password verification
- Frontend: React AuthContext, login page, protected routes
- Config: dashboard_auth section in config.yaml + env var overrides
- Security: Rate limiting (5 attempts/15min), persistent session secret
- 16 unit tests for auth middleware
Auth disabled by default for backward compatibility.
2026-01-13 13:27:38 -05:00
