Mechiel Lukkien dda0a4ced1

at "client config", mention clients should explicitly be configured with the most secure authentication mechanism supported ...

to prevent authentication mechanism downgrade attacks by MitM.

2024-01-09 10:50:42 +01:00

..

admin_test.go

replace http basic auth for web interfaces with session cookie & csrf-based auth

2024-01-05 10:48:42 +01:00

admin.go

replace http basic auth for web interfaces with session cookie & csrf-based auth

2024-01-05 10:48:42 +01:00

admin.html

replace http basic auth for web interfaces with session cookie & csrf-based auth

2024-01-05 10:48:42 +01:00

admin.js

at "client config", mention clients should explicitly be configured with the most secure authentication mechanism supported

2024-01-09 10:50:42 +01:00

admin.ts

at "client config", mention clients should explicitly be configured with the most secure authentication mechanism supported

2024-01-09 10:50:42 +01:00

api.json

replace http basic auth for web interfaces with session cookie & csrf-based auth

2024-01-05 10:48:42 +01:00

api.ts

replace http basic auth for web interfaces with session cookie & csrf-based auth

2024-01-05 10:48:42 +01:00