This PR adds new support for fine-grained control over the server/ui handling when the X-Forwarded-Prefix header is set.
Additionally, this allows getting a websocket token, so cases where the websocket is not pre-authenticated, but regular requests are authenticated, it works the same.
Added a new endpoint for probing for pre-authenticed conditions without causing a 401 to be logged.
This PR updates the replace code for the `<base href="/" />` patching to support variations with whitespace and trailing slashes.
This has no immediate effect but makes it more stable in case the source document(s) change in the future.
This adds support for the `X-Forwaded-Prefix` that rewires the paths using a custom base, with a default of `/ngclient`.
This allows using ngclient behind a proxy.
This fixes#6278
Added auth requirement on all endpoints.
Added SignIn-, Access- and Refresh-Tokens based on JWT.
Upgraded stored password to be based on PBKDF2.
Added default password assignment.
Updated logic to support auth-header and re-sign-in for tray-icon and web-ui.
Kenneth Skovhede