3 Commits

Include renames

Author	SHA1	Message	Date
Kevin L'Hereec	991173aa05	feat(auth): add session login page, API key guard, and remove orphan SQL migrations ... - Add session-based authentication for web-UI (Login.vue, AuthController) - Add AuthSessionMiddleware: redirects unauthenticated users to /login - Add ApiKeyMiddleware: validates X-Api-Key header on all /api/v1 routes - Add BasicAuthMiddleware: registered for future M2M use - Use timingSafeEqual for all credential comparisons (timing attack prevention) - Regenerate session ID on login (session fixation prevention) - Validate redirect target after login (open redirect prevention) - Require WEBUI_USERNAME, WEBUI_PASSWORD, API_KEY as mandatory env vars - Share auth.username/authenticated via Inertia shared props - Add user dropdown in navbar (avatar icon + username + logout) - Add login i18n keys in fr.json and en.json - Remove orphan SQL migrations (users, auth_access_tokens) and @adonisjs/lucid	2026-07-03 13:59:05 +02:00
Kevin L'Hereec	4eb3f0795a	feat: immediate mode (I) commands via Connection Request ... - Hide Refresh button when ConnectionRequestURL is unavailable - Fix ImmediateCommandStateMachine session lifecycle (mark complete when no commands) - Fix preemption: new CONNECTION REQUEST replaces stale immediate session - Protect ensureSessionForRemote from rebinding to completed machines - Normalize numeric event codes from simulators (6 -> 6 CONNECTION REQUEST) - Extract updatePendingCommandsStatus for clarity	2026-06-02 14:00:31 +02:00
Kevin L'HereecandCopilot	d1c65dbf1e	chore: initial commit — AdonisJS v7 TR-069 ACS ... - Docker infrastructure (Dockerfile, docker-compose.yml, genieacs-sim) - AdonisJS v7 app with Inertia.js + Vue 3 - MongoDB integration - CWMP/TR-069 state machine engine - Configuration engine with compliance tracking - Branding: ADAM ACS (favicon, navbar, locales) Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>	2026-05-29 16:46:37 +02:00