Kyle Isom 8d9d9da6f5 fix UI privilege escalation vulnerability ...

- Add requireAdminRole middleware to web UI that checks
  claims.HasRole("admin") and returns 403 if absent
- Apply middleware to all admin routes (accounts, policies,
  audit, dashboard, credentials)
- Remove redundant inline admin check from handleAdminResetPassword
- Profile routes correctly require only authentication, not admin

Security: The admin/adminGet middleware wrappers only called
requireCookieAuth (JWT validation) but never verified the admin
role. Any authenticated user could access admin endpoints
including role assignment. Fixed by inserting requireAdminRole
into the middleware chain for all admin routes.

2026-03-12 21:59:02 -07:00

..

context.go

Add HTMX-based UI templates and handlers for account and audit management

2026-03-11 18:02:53 -07:00

csrf.go

Add HTMX-based UI templates and handlers for account and audit management

2026-03-11 18:02:53 -07:00

handlers_accounts.go

fix UI privilege escalation vulnerability

2026-03-12 21:59:02 -07:00

handlers_audit.go

UI: pgcreds create button; show logged-in user

2026-03-12 11:38:57 -07:00

handlers_auth.go

trusted proxy, TOTP replay protection, new tests

2026-03-12 17:44:01 -07:00

handlers_dashboard.go

UI: pgcreds create button; show logged-in user

2026-03-12 11:38:57 -07:00

handlers_policy.go

Checkpoint: password reset, rule expiry, migrations

2026-03-12 14:38:38 -07:00

session.go

Add HTMX-based UI templates and handlers for account and audit management

2026-03-11 18:02:53 -07:00

ui_test.go

Fix UI: install real HTMX, add PG creds and roles UI

2026-03-11 22:30:13 -07:00

ui.go

fix UI privilege escalation vulnerability

2026-03-12 21:59:02 -07:00