Kyle Isom bef5a3269d Merge SEC-09: hide admin nav links from non-admin users ...

# Conflicts:
#	internal/ui/ui_test.go

2026-03-13 01:06:50 -07:00

..

auth

trusted proxy, TOTP replay protection, new tests

2026-03-12 17:44:01 -07:00

config

Fix SEC-12: reduce default token expiry to 7 days

2026-03-13 00:43:20 -07:00

crypto

Implement dashboard and audit log templates, add paginated audit log support

2026-03-11 14:05:08 -07:00

db

Fix SEC-08: make system token issuance atomic

2026-03-13 00:43:13 -07:00

grpcserver

Merge SEC-02: normalize lockout response

2026-03-13 01:05:56 -07:00

middleware

trusted proxy, TOTP replay protection, new tests

2026-03-12 17:44:01 -07:00

model

Add guest, viewer, editor, and commenter roles to compile-time allowlist

2026-03-12 21:03:24 -07:00

policy

UI: password change enforcement + migration recovery

2026-03-12 15:33:19 -07:00

server

Merge SEC-02: normalize lockout response

2026-03-13 01:05:56 -07:00

token

trusted proxy, TOTP replay protection, new tests

2026-03-12 17:44:01 -07:00

ui

Merge SEC-09: hide admin nav links from non-admin users

2026-03-13 01:06:50 -07:00

validate

Fix SEC-05: add body size limit to REST API and max password length

2026-03-13 00:42:11 -07:00