1
0
mirror of git://f0xx.org/ac/ac-platform-php synced 2026-07-29 00:57:39 +03:00

11 Commits

Author SHA1 Message Date
Anton Afanasyeu
dafa15808c Add HeartbeatApi with legacy GET support for old app clients.
Older builds probe heartbeat.php via GET (ntp/ip/ping); POST-only caused HTTP 405 on some devices.

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-07-12 19:44:33 +02:00
Anton Afanasyeu
4f4a2f9ea0 Add branded QR renderer with centered app logo overlay.
High error correction qrencode plus GD logo plate for 2FA and short-link QR PNGs.

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-07-12 14:21:10 +02:00
Anton Afanasyeu
dbe0a83636 feat(platform): shared nav shell and common footer config
Signed-off-by: Anton Afanasyeu <a.afanasieff@gmail.com>
2026-07-12 13:53:14 +02:00
Anton Afanasyeu
23b352ff27 Add media_pipelines RBAC privilege sets for experimental restream UI.
Grants media_pipelines_view and media_pipelines_operate for lab developer
access alongside global admin gating.

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-07-11 15:27:00 +02:00
Anton Afanasyeu
08fb2db96e fix(session): 24h cookie lifetime and account-security route
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-07-11 14:48:27 +02:00
Anton Afanasyeu
698fbd7658 Fix session cookie secure flag behind TLS-terminating FE proxy.
Treat apps.f0xx.org and sibling public vhosts as HTTPS when PHP sees plain HTTP on port 80.

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-07-08 14:55:44 +02:00
Anton Afanasyeu
e482d56ef5 fix(session): honor X-Forwarded-Proto; widen auth route matching
Secure session cookies behind TLS-terminating FE. resolve_console_route
recognizes /two-factor/approve and /api/two-factor/poll.

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-07-05 19:12:53 +02:00
Anton Afanasyeu
0ebb12b52d Merge commit '6f52355' into next 2026-06-28 21:59:23 +02:00
Anton Afanasyeu
6f52355faa feat(2fa): require AuthApproval in bootstrap
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-06-27 22:49:50 +02:00
Anton Afanasyeu
515929238b deps: register internal ac/* submodules under deps/ 2026-06-24 17:45:14 +02:00
Anton Afanasyeu
f4b39bea26 initial 2026-06-23 12:29:28 +02:00