Kevin L'Hereec
991173aa05
- Add session-based authentication for web-UI (Login.vue, AuthController) - Add AuthSessionMiddleware: redirects unauthenticated users to /login - Add ApiKeyMiddleware: validates X-Api-Key header on all /api/v1 routes - Add BasicAuthMiddleware: registered for future M2M use - Use timingSafeEqual for all credential comparisons (timing attack prevention) - Regenerate session ID on login (session fixation prevention) - Validate redirect target after login (open redirect prevention) - Require WEBUI_USERNAME, WEBUI_PASSWORD, API_KEY as mandatory env vars - Share auth.username/authenticated via Inertia shared props - Add user dropdown in navbar (avatar icon + username + logout) - Add login i18n keys in fr.json and en.json - Remove orphan SQL migrations (users, auth_access_tokens) and @adonisjs/lucid
39 lines
738 B
Bash
39 lines
738 B
Bash
# Node
|
|
TZ=UTC
|
|
PORT=8080
|
|
HOST=0.0.0.0
|
|
NODE_ENV=development
|
|
|
|
# App
|
|
LOG_LEVEL=info
|
|
APP_KEY=your-app-key-here-min-16-chars!!
|
|
APP_URL=http://${HOST}:${PORT}
|
|
|
|
# Session
|
|
SESSION_DRIVER=cookie
|
|
|
|
# MongoDB
|
|
MONGODB_URI=mongodb://adam:adam@localhost:27017/adam-acs?authSource=admin
|
|
MONGODB_DB_NAME=adam-acs
|
|
|
|
# Observability
|
|
OTEL_EXPORTER_URI=http://localhost:4318
|
|
OTEL_SAMPLER_MODE=parentbased_traceidratio
|
|
OTEL_SAMPLER_RATIO=0.1
|
|
OTEL_SERVICE_NAME=adam-acs
|
|
|
|
# Remote logging
|
|
LOG_HOST=localhost
|
|
LOG_PORT=514
|
|
LOG_PROTOCOL=udp4
|
|
|
|
# Security
|
|
HASH_KEY=0123456789abcdef0123456789abcdef
|
|
|
|
# Web UI Basic Auth (browser prompt)
|
|
WEBUI_USERNAME=Admin
|
|
WEBUI_PASSWORD=Grenoble:38
|
|
|
|
# REST API Key (set in X-Api-Key header)
|
|
API_KEY=change-me-with-a-strong-random-key
|