Abdulhafiz Davlatov bc8bbf3562 feat: rate limit auth endpoints and scope user proxy host permissions ...

- Add in-memory sliding window rate limiter for auth token endpoints with CI/test bypass and successful request exclusion
- Add user_permission meta column migration and Objection model configuration
- Support scoping allowed proxy hosts per user when in 'Created Items Only' visibility mode
- Restrict advanced nginx configuration editing on hosts to admin users only
- Fix user permissions route ID parsing and omit id from permission update payloads
- Add allowed proxy hosts selector in permissions modal and display permissions summary badges in users table

2026-11-05 12:16:36 +05:00

..

access-list-object.json

Swagger/openapi schema mega fixes and Cypress validation/enforcement

2025-10-30 11:50:51 +10:00

audit-log-list.json

Fix custom cert writes, fix schema

2025-10-02 08:12:33 +10:00

audit-log-object.json

Swagger/openapi schema mega fixes and Cypress validation/enforcement

2025-10-30 11:50:51 +10:00

certificate-list.json

Refactor API Schema and validation

2024-10-09 18:05:15 +10:00

certificate-object.json

Fixes for upgraded debian trixie

2026-05-25 07:37:24 +10:00

check-version-object.json

Fix openapi schema format

2025-11-13 11:51:13 +10:00

dead-host-list.json

Refactor API Schema and validation

2024-10-09 18:05:15 +10:00

dead-host-object.json

Swagger/openapi schema mega fixes and Cypress validation/enforcement

2025-10-30 11:50:51 +10:00

dns-providers-list.json

Moved certrbot plugin list to backend

2025-10-26 00:28:03 +10:00

error-object.json

Swagger/openapi schema mega fixes and Cypress validation/enforcement

2025-10-30 11:50:51 +10:00

error.json

Fix CVE-2024-46256 and CVE-2024-46257

2024-10-11 11:31:57 +10:00

health-object.json

Swagger/openapi schema mega fixes and Cypress validation/enforcement

2025-10-30 11:50:51 +10:00

log-sources-object.json

feat: Add a Logs viewer to the admin UI

2026-09-22 13:11:38 -03:00

log-tail-object.json

feat: Add a Logs viewer to the admin UI

2026-09-22 13:11:38 -03:00

permission-object.json

feat: rate limit auth endpoints and scope user proxy host permissions

2026-11-05 12:16:36 +05:00

proxy-host-list.json

Refactor API Schema and validation

2024-10-09 18:05:15 +10:00

proxy-host-object.json

feat: per-path access lists, host logs modal, PostgreSQL support

2026-08-07 16:40:32 +07:00

redirection-host-list.json

Refactor API Schema and validation

2024-10-09 18:05:15 +10:00

redirection-host-object.json

Swagger/openapi schema mega fixes and Cypress validation/enforcement

2025-10-30 11:50:51 +10:00

security-schemes.json

Swagger/openapi schema mega fixes and Cypress validation/enforcement

2025-10-30 11:50:51 +10:00

setting-list.json

Refactor API Schema and validation

2024-10-09 18:05:15 +10:00

setting-object.json

Adds tests for settings endpoints

2024-10-17 08:48:47 +10:00

stream-list.json

Fix incorrect swagger for streams list

2025-06-30 13:00:25 +10:00

stream-object.json

Adds integration tests for per path access lists, fixes ipv6 jsv,

2026-09-24 12:21:49 +10:00

token-challenge.json

2fa work slight refactor

2026-01-14 11:45:12 +10:00

token-object.json

Fix type for token.expires

2025-02-03 21:47:41 +01:00

user-list.json

Refactor API Schema and validation

2024-10-09 18:05:15 +10:00

user-object.json

Swagger/openapi schema mega fixes and Cypress validation/enforcement

2025-10-30 11:50:51 +10:00