22 Commits (02a4c51406de4a6a66574bf476ebcce1426abbfb)

Author	SHA1	Message	Date
Jakub Onderka	1a589c64f8	chg [authkeys] Add validation	2022-03-27 18:45:32 +02:00
Jakub Onderka	b32f397949	fix: [internal] CIDR validation	2022-02-23 10:10:57 +01:00
Jakub Onderka	8d7df612f3	new: [CLI] Get authkey info by `cake user authkey`	2021-11-25 18:15:22 +01:00
Jakub Onderka	98b87d8987	chg: [security] Use const hasher also for login	2021-08-24 21:45:37 +02:00
Jakub Onderka	c2553f4f66	chg: [security] Mitigate timing attacks when comparing advanced auth keys hashes	2021-08-20 18:01:18 +02:00
Jakub Onderka	017249451b	new: [API] Read only authkeys	2021-06-28 12:41:10 +02:00
Jakub Onderka	ad1b373766	new: [log] Audit log	2021-05-03 13:44:44 +02:00
Jakub Onderka	ab84aecc48	new: [authkeys] Copy key info when resetting key	2021-03-03 09:23:07 +01:00
Jakub Onderka	599819f7f9	new: [authkeys] Allowed IPs	2021-03-03 09:23:07 +01:00
Jakub Onderka	35e470eb4d	new: [UI] Show number of unique IPs for key usage	2020-12-17 13:50:25 +01:00
Jakub Onderka	2b30bab9b0	new: [UI] Show last key usage in index table	2020-12-17 13:50:25 +01:00
Jakub Onderka	c0f6463d57	new: [security] Cancel API session right after auth key is deleted	2020-12-17 13:50:25 +01:00
Jakub Onderka	640e9492d7	new: [security] Put information about key expiration into response header	2020-12-17 13:50:25 +01:00
Jakub Onderka	f27580f1e6	new: [security] Allow to set key validity	2020-12-17 13:50:25 +01:00
Jakub Onderka	9896f67358	new: [security] New setting Security.username_in_response_header	2020-12-17 13:50:25 +01:00
Jakub Onderka	ee8a495d89	new: [internal] Show auth key usage in key view page	2020-12-17 13:49:32 +01:00
Jakub Onderka	e5e855b3c2	new: [internal] Allow to log authkey usage in Redis	2020-12-17 13:49:32 +01:00
Jakub Onderka	48eafd4d47	fix: [authkey] There is no AuthKey.timestamp column	2020-11-19 13:19:43 +01:00
Jakub Onderka	b057426b9f	fix: [security] Properly validate new auth key	2020-11-14 22:33:05 +01:00
iglocska	03e5ad741d	fix: [authkey] various improvements ... - correct lookup of users by API key when no expiration is set - added authkey reset functions	2020-11-13 12:52:20 +01:00
iglocska	0b6da917d4	new: [advanced authkey] API key copy to the new system added to diagnostics	2020-10-20 08:35:21 +02:00
iglocska	8bcd274796	new: [Authkey] system added	2020-10-20 01:48:04 +02:00