Commander1024/ESP32_Serial_Swiss_Army_Knife
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Replace Web Basic Auth With Cookie Sessions

Browse Source 
Add bounded login challenges, CSRF/origin enforcement, logout, and
session-bound WebSocket admission. Isolate private HTTPD access behind a
version-guarded adapter and add focused host coverage. Also let empty
admin
SSH input reach the normal console handler.
This commit is contained in:
Commander1024
2026-09-05 23:55:05 +02:00
parent 4435a7fddd
commit 5a609fa40b
36 changed files with 1940 additions and 360 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/user_administration_tests.md
+1 -1
View File
@@ -168,7 +168,7 @@ Finally, issue commands concurrently from UART0 and admin SSH, including `user l
## Planned Phase 8D integrated web administration
These are acceptance requirements for the planned implementation, not tests that have passed yet. Execute them incrementally using the [Phase 8D work-unit plan](phase8d_plan.md), not only at the end of the phase.
These are acceptance requirements, not tests that have passed yet. The [8D.3 live login/logout implementation](phase8d3_implementation.md) is host-tested/build-verified and awaits M1 target/browser execution; browser administration remains planned. Execute them incrementally using the [Phase 8D work-unit plan](phase8d_plan.md), not only at the end of the phase.
Validation checkpoints: