haeaeae/duplicati
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
9,823 Commits 140 Branches 416 Tags
77c64becc85595bfbe3ed7ecacaa9c9052d8a368
Commit Graph
18 Commits
Author SHA1 Message Date
Kenneth Skovhede f962bfc89b Added constraint on the issue timestamp to limit the window where 
token drift is considered acceptable
 2024-09-02 11:40:26 +02:00
Kenneth Skovhede bc9ed71ff8 Added support for drifts in JWT refresh tokens. This can happen if the user refreshes the browser during the login. 2024-08-31 11:22:10 +02:00
Kenneth Skovhede 2b55b3449d Add custom hostname validation 
This adds a manually implemented hostname check that is applied as an endpoint filter.
With the implemented filter, the validation rules are similar to those before Kestrel was introduced.
This fixes #5469
 2024-08-19 14:07:48 +02:00
natan da7240d31a bug(5359): swallow WebSocketException exception when client aborted 2024-08-01 17:14:03 +02:00
Kenneth Skovhede d8f3e110c5 Added missing language filter support in Kestrel server 2024-07-19 13:36:17 +02:00
Kenneth Skovhede 105f6e16ff Fixed origin mapping 2024-07-18 10:51:58 +02:00
natan 27ce549e75 cleanup WebsocketAccessor.cs and StatusService.cs a bit. 
Remove /serverstate endpoint
 2024-07-12 17:59:21 +02:00
Kenneth Skovhede 94d6ab76ee Changed logic for reconnect to not rely on serverstate API. 
Changed websocket to send current state on initial connect.
 2024-07-11 16:24:22 +02:00
natan 0ae9990f18 fix 401 in websocket 2024-07-09 15:49:17 +02:00
natan f7656f464e fix websocket connection 2024-07-03 22:26:03 +02:00
Kenneth Skovhede e25df96d23 Adding cache headers 2024-07-01 22:21:51 +02:00
Kenneth Skovhede d3a8ecacad Implemented single operation token. 
Fixed export and bugreport download.
 2024-06-28 08:56:00 +02:00
Kenneth Skovhede 92b82df78b Disabled websocket as it is not complete. 
Fallback to longpoll :'(
 2024-06-20 22:46:42 +02:00
Kenneth Skovhede 25a7667e36 Minor updates to JWT issuance 2024-06-19 22:43:52 +02:00
Kenneth Skovhede 3f29642f6c Implemented JWT tokens. 
Added auth requirement on all endpoints.
Added SignIn-, Access- and Refresh-Tokens based on JWT.
Upgraded stored password to be based on PBKDF2.
Added default password assignment.
Updated logic to support auth-header and re-sign-in for tray-icon and web-ui.
 2024-06-19 13:54:10 +02:00
Kenneth Skovhede 9f79025744 Removed HttpServer. 
Re-implemented everything using ASP.NET.
Changed some requests to use JSON instead of FORM data.
Some work towards deleting the FIXMEGlobal instance.
Auth is missing, XSRF does not work correctly.
 2024-06-07 15:56:43 +02:00
natan d78b9f2c63 WIP 2024-04-03 10:40:29 +02:00
natan 5d53eddb32 WIP 2024-03-26 18:32:56 +01:00