hansjone/netx
1
0
Fork 0
mirror of https://github.com/hansjone/netx.git synced 2026-10-09 06:40:45 +08:00
Code Issues Projects Releases 1 Packages Wiki Activity Actions 2
445 commits 1 branch 2 tags 8 MiB
Commit graph

7 commits

Author SHA1 Message Date
oliver
61531e524f Audit only intentional auth actions, not automatic 401/403 gates. 
Stop recording unauthorized/forbidden/password-gate and silent refresh; keep login, logout, and failed-login style events.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-09-01 21:51:59 +08:00
oliver
d35d3992c2 Dedupe auth.unauthorized floods from unauthenticated page loads. 
Keep one 401 audit per IP+path window, and hide historical unauthorized noise from the default business view.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-09-01 21:48:18 +08:00
oliver
ea3d45ddc2 Stop auditing successful auth.me and auth.sessions polls. 
These are UI session checks that flooded the business audit view; keep failures only.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-09-01 21:44:52 +08:00
oliver
c181158209 Drop HTTP polling noise from operation audit by default. 
Persist only business events and mutating/failed HTTP calls, and default the audit UI to a business view with an explicit HTTP filter.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-09-01 21:41:05 +08:00
oliver
8915455b52 Record WebCRT device login/commands and NE exec in operation audit. 
Make session lifecycle and typed CLI lines searchable in audit_log with password redaction, and surface summaries plus device filters in the ops UI.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-09-01 21:36:44 +08:00
oliver
d56020d84c Harden runtime budgets: DB pool, CLI concurrency, timeouts, and metrics. 
Add shared CLI budget/timeout with force-close, parallel port-traffic dispatch, unified shutdown, bounded audit queue, output/log caps, and /metrics probes.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-08-02 18:02:43 +08:00
oliver
633a9d55bd Harden auth scopes, SQL/WebCRT gates, and per-install JWT secrets. 
Add capability RBAC, Alembic bootstrap, optional worker schedulers, and close public docs by default so lab installs stay usable without shared signing keys.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-08-02 16:24:34 +08:00