Kyle Isom 15e7eb5bd1 Remove all inline JS from admin templates ...

script-src 'self' blocks inline onclick handlers and <script> blocks.
Migrate all interactive behavior to data-* attributes wired by mcias.js:

- data-toggle-form: accounts, policies, pgcreds create-form buttons
- data-href: audit clickable table rows
- data-tab: policy form tab switching (moved showTab from inline script)

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-04-01 08:26:29 -07:00

..

docs.html

Bundle swagger-ui assets locally for /docs

2026-03-15 19:19:12 -07:00

htmx.min.js

Fix UI: install real HTMX, add PG creds and roles UI

2026-03-11 22:30:13 -07:00

mcias.js

Remove all inline JS from admin templates

2026-04-01 08:26:29 -07:00

openapi.yaml

Add FIDO2/WebAuthn passkey authentication

2026-03-16 16:12:59 -07:00

style.css

Fix CSP-blocked inline handlers on SSO clients page

2026-04-01 08:22:17 -07:00

swagger-ui-bundle.js

Bundle swagger-ui assets locally for /docs

2026-03-15 19:19:12 -07:00

swagger-ui.css

Bundle swagger-ui assets locally for /docs

2026-03-15 19:19:12 -07:00

webauthn.js

Add SSO authorization code flow (Phase 1)

2026-03-30 15:21:48 -07:00