hansjone/netx
1
0
Fork 0
mirror of https://github.com/hansjone/netx.git synced 2026-10-09 03:10:46 +08:00
Code Issues Projects Releases 1 Packages Wiki Activity Actions 2
389 commits 1 branch 2 tags 8 MiB
Commit graph

7 commits

Author SHA1 Message Date
oliver
ea3d45ddc2 Stop auditing successful auth.me and auth.sessions polls. 
These are UI session checks that flooded the business audit view; keep failures only.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-09-01 21:44:52 +08:00
oliver
c181158209 Drop HTTP polling noise from operation audit by default. 
Persist only business events and mutating/failed HTTP calls, and default the audit UI to a business view with an explicit HTTP filter.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-09-01 21:41:05 +08:00
oliver
20c2fcd496 Harden auth with revocable sessions, cookies, and single-login default. 
Issue short-lived access JWTs backed by AuthSession rows, HttpOnly cookies with refresh rotation, idle timeout, session management UI, WebCRT ownership caps, and optional Redis login rate limits; new logins revoke other sessions by default.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-08-06 14:13:37 +08:00
oliver
2d92dde8e5 Add filter-based topology bulk writes and refine API key scopes UX. 
Filter add/layout/remove keeps MCP payloads small; tokens default MCP scopes and edit them in a modal with a compact help tip.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-08-04 07:39:14 +08:00
oliver
a2f91f6ee2 Split port traffic service and replace deprecated UTC/lifespan APIs. 
Keep the public facade stable while moving device CRUD and sample/compare
logic into focused modules, and use naive UTC via timeutil plus FastAPI lifespan.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-08-02 17:06:46 +08:00
oliver
633a9d55bd Harden auth scopes, SQL/WebCRT gates, and per-install JWT secrets. 
Add capability RBAC, Alembic bootstrap, optional worker schedulers, and close public docs by default so lab installs stay usable without shared signing keys.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-08-02 16:24:34 +08:00
hansjone
6d4cd741ef feat(auth): add local login, audit, API keys, and system admin UI 
Gate netx Web/API/WebCRT with JWT and per-user API tokens, bootstrap an admin with forced password change, and expose users/audit/API-key management under a System section. MCP can reuse data/auth/mcp_token without extra env for local labs.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-07-30 02:34:25 +00:00