Anton Afanasyeu
4f4a2f9ea0
Add branded QR renderer with centered app logo overlay.
...
High error correction qrencode plus GD logo plate for 2FA and short-link QR PNGs.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-07-12 14:21:10 +02:00
Anton Afanasyeu
dbe0a83636
feat(platform): shared nav shell and common footer config
...
Signed-off-by: Anton Afanasyeu <a.afanasieff@gmail.com >
2026-07-12 13:53:14 +02:00
Anton Afanasyeu
23b352ff27
Add media_pipelines RBAC privilege sets for experimental restream UI.
...
Grants media_pipelines_view and media_pipelines_operate for lab developer
access alongside global admin gating.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-07-11 15:27:00 +02:00
Anton Afanasyeu
08fb2db96e
fix(session): 24h cookie lifetime and account-security route
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-07-11 14:48:27 +02:00
Anton Afanasyeu
698fbd7658
Fix session cookie secure flag behind TLS-terminating FE proxy.
...
Treat apps.f0xx.org and sibling public vhosts as HTTPS when PHP sees plain HTTP on port 80.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-07-08 14:55:44 +02:00
Anton Afanasyeu
e482d56ef5
fix(session): honor X-Forwarded-Proto; widen auth route matching
...
Secure session cookies behind TLS-terminating FE. resolve_console_route
recognizes /two-factor/approve and /api/two-factor/poll.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-07-05 19:12:53 +02:00
Anton Afanasyeu
0ebb12b52d
Merge commit '6f52355' into next
2026-06-28 21:59:23 +02:00
Anton Afanasyeu
6f52355faa
feat(2fa): require AuthApproval in bootstrap
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-06-27 22:49:50 +02:00
Anton Afanasyeu
515929238b
deps: register internal ac/* submodules under deps/
2026-06-24 17:45:14 +02:00
Anton Afanasyeu
f4b39bea26
initial
2026-06-23 12:29:28 +02:00
