Commander1024
655f26a611
Clarify Service Contracts And Security Invariants
2026-09-21 13:39:30 +02:00
Commander1024
ac80863d80
Remove Legacy Credential Bootstrap Paths
...
Decouple user provisioning from HTTPS identity storage while retaining
compatible v1 user records and migrating TLS material to the
credential-free
v2 format. Add focused security regression coverage and update operator
documentation.
2026-09-08 19:09:26 +02:00
Commander1024
42f6423d4e
Implement SSH authorized key management
2026-09-08 16:37:47 +02:00
Commander1024
94433ef975
Add typed account and password settings
...
- Add admin account list, create, role, delete, and password workflows
- Execute identity-checked mutations through the existing dispatcher
- Bound queued credential lifetime and wipe transient secrets
- Add explicit password generation with saved-value acknowledgement
- Handle self-revocation and uncertain outcomes without automatic
retries
- Register optional account routes without disrupting terminal
transports
- Expand host regressions and document contracts and pending target
checks
Validated host suites and pio run; hardware validation remains pending.
2026-09-08 09:27:02 +02:00
Commander1024
0a1bbd6782
Add Serialized SSH Administrative Console
2026-08-30 18:07:02 +02:00
Commander1024
c7d0d59f3e
Cache web authentication results
...
Add a short-lived, HMAC-keyed cache for validated principals and
invalidate entries when principals become stale. Improve duplicate SSH
key
errors and enable Ed25519 streaming verification.
2026-08-30 12:02:44 +02:00
Commander1024
0c058b6a8f
Implement role-aware HTTPS and SSH authentication
2026-08-30 01:31:05 +02:00
Commander1024
cd235445c7
Add role-based user database administration
2026-08-30 00:56:18 +02:00
Commander1024