Anton Afanasyeu
23b352ff27
Add media_pipelines RBAC privilege sets for experimental restream UI.
...
Grants media_pipelines_view and media_pipelines_operate for lab developer
access alongside global admin gating.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-07-11 15:27:00 +02:00
Anton Afanasyeu
08fb2db96e
fix(session): 24h cookie lifetime and account-security route
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-07-11 14:48:27 +02:00
Anton Afanasyeu
e482d56ef5
fix(session): honor X-Forwarded-Proto; widen auth route matching
...
Secure session cookies behind TLS-terminating FE. resolve_console_route
recognizes /two-factor/approve and /api/two-factor/poll.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-07-05 19:12:53 +02:00
Anton Afanasyeu
6f52355faa
feat(2fa): require AuthApproval in bootstrap
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-06-27 22:49:50 +02:00
Anton Afanasyeu
f4b39bea26
initial
2026-06-23 12:29:28 +02:00
