8915455b52
Record WebCRT device login/commands and NE exec in operation audit.
...
Make session lifecycle and typed CLI lines searchable in audit_log with password redaction, and surface summaries plus device filters in the ops UI.
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-09-01 21:36:44 +08:00
0a550abcb0
Fix Huawei WebCRT hop login echo doubling and safer Change-now handling.
...
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-08-28 23:34:15 +08:00
cacd8c7b75
Keep WebCRT login failures in-terminal CRT-style and skip duplicate bootstrap replay.
...
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-08-28 22:33:19 +08:00
6aedd2c522
Fix WebCRT connect crash from invalid Netmiko session_log wrapper.
...
Use a BytesIO subclass for live connect echo so Netmiko accepts the log object again.
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-08-28 21:55:20 +08:00
6ed08e24de
Stream WebCRT login live and unblock Huawei hop interactive connect.
...
Skip Huawei special_login_handler under interactive WebCRT, harden stelnet host-key auth, and echo hop/login progress into the terminal during connect.
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-08-28 21:41:36 +08:00
b6a579ec02
Skip CLI startup when device credentials are incomplete.
...
Reject non-interactive CLI work early across exec, LLDP, config sync, collection, traffic, and connect-test flows so tasks record a clear reason instead of launching a doomed session.
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-08-11 15:11:59 +08:00
20c2fcd496
Harden auth with revocable sessions, cookies, and single-login default.
...
Issue short-lived access JWTs backed by AuthSession rows, HttpOnly cookies with refresh rotation, idle timeout, session management UI, WebCRT ownership caps, and optional Redis login rate limits; new logins revoke other sessions by default.
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-08-06 14:13:37 +08:00
9314f11ce7
Fix WebCRT sessions killed by StrictMode ws_ticket reuse.
...
Allow short-lived tickets multiple uses, stop deleting PTY on transient websocket errors, and avoid marking connect complete after a dropped wait loop.
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-08-02 18:49:29 +08:00
d56020d84c
Harden runtime budgets: DB pool, CLI concurrency, timeouts, and metrics.
...
Add shared CLI budget/timeout with force-close, parallel port-traffic dispatch, unified shutdown, bounded audit queue, output/log caps, and /metrics probes.
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-08-02 18:02:43 +08:00
96b76294b4
Split UME sync and WebCRT session into focused modules.
...
Keep public facades stable, re-export symbols tests patch, and fix missing threading import plus reaper fixture state.
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-08-02 17:12:55 +08:00
