CaIon 385d2dfd10 feat(auth): add safe multi-RP ID passkey support ...

Preserve legacy credentials across primary RP ID changes and bind successful
assertions to their verified RP ID. Share domain selection across sign-in,
login verification and sensitive operations without replaying ceremonies.

Save domain settings atomically, preview known and unknown credential impact,
and require fresh confirmation before removing domains still in use. Recheck
trusted RP IDs when persisting credentials and record safe operation audits.

Use read-only configuration snapshots, accept trusted HTTPS intranet hosts,
check registration origins early, and preserve historical capitalization.
Update settings guidance and all supported translations.

Validation: SQLite 3.50.4, MySQL 8.0.46 and PostgreSQL 16.15, including fresh
and released-schema upgrade checks; Go regression and race checks; 79 frontend
tests; TypeScript, lint, frontend build and root Go build.

Security references: OWASP ASVS 5.0.0 V6.3.4 and V6.3.8, Authentication and
Session Management Cheat Sheets, and the WebAuthn RP ID/origin rules.

2026-09-11 23:15:29 +08:00

..

api-router.go

feat(auth): add safe multi-RP ID passkey support

2026-09-11 23:15:29 +08:00

authz-router.go

feat: better admin permissions (#5755)

2026-06-27 17:01:59 +08:00

channel_router_test.go

feat: better admin permissions (#5755)

2026-06-27 17:01:59 +08:00

channel-router.go

feat: better admin permissions (#5755)

2026-06-27 17:01:59 +08:00

dashboard.go

feat(middleware): add RouteTag middleware for enhanced logging and routing

2026-02-25 00:11:24 +08:00

main.go

feat(security): add access token management and audit logs

2026-09-06 22:48:58 +08:00

plugin_router_test.go

feat(plugins): extend plugin metadata and icon support

2026-09-08 15:15:55 +08:00

plugin-router.go

refactor: modernize Go code conventions

2026-09-08 20:55:03 +08:00

relay_router_test.go

fix: temp disable /messages/count_tokens

2026-09-04 10:07:03 +08:00

relay-router.go

fix: temp disable /messages/count_tokens

2026-09-04 10:07:03 +08:00

task_plugin_options_router_test.go

feat(task): replace built-in task adaptors with a sandboxed JS plugin system (#7076)

2026-08-29 18:51:57 +08:00

task_plugin_protocol_router_test.go

feat(task): replace built-in task adaptors with a sandboxed JS plugin system (#7076)

2026-08-29 18:51:57 +08:00

task_router_test.go

feat(task): replace built-in task adaptors with a sandboxed JS plugin system (#7076)

2026-08-29 18:51:57 +08:00

task-plugin-protocol-router.go

feat(task): replace built-in task adaptors with a sandboxed JS plugin system (#7076)

2026-08-29 18:51:57 +08:00

task-router.go

feat(task): replace built-in task adaptors with a sandboxed JS plugin system (#7076)

2026-08-29 18:51:57 +08:00

video_router_test.go

feat(task): replace built-in task adaptors with a sandboxed JS plugin system (#7076)

2026-08-29 18:51:57 +08:00

video-router.go

feat(task): replace built-in task adaptors with a sandboxed JS plugin system (#7076)

2026-08-29 18:51:57 +08:00

web-router.go

feat(security): add access token management and audit logs

2026-09-06 22:48:58 +08:00