leistungsbilanz-ts/src/server/auth
Grovy311 5073d9342a Harden authentication and put filter toggle and fields in one row
Security: per-username login throttling, constant-time unknown-user check,
Sec-Fetch-Site CSRF guard for writes, session rotation on login and
password change, absolute session lifetime, sessions ended on reset and
deactivation, last-admin protection, input length caps, ASCII usernames,
clickjacking headers. Covered by tests/authentication.test.ts.

Filter panel: toggle, fields and count share one row to save space.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-09-28 21:30:30 +02:00
..
auth-config.ts Harden authentication and put filter toggle and fields in one row 2026-09-28 21:30:30 +02:00
auth.middleware.ts Harden authentication and put filter toggle and fields in one row 2026-09-28 21:30:30 +02:00
cookie.ts Harden authentication and put filter toggle and fields in one row 2026-09-28 21:30:30 +02:00
login-throttle.ts Harden authentication and put filter toggle and fields in one row 2026-09-28 21:30:30 +02:00
password.ts Add login-required user management (admin/user roles, Config->Benutzer) 2026-09-28 19:51:47 +02:00
sessions.ts Harden authentication and put filter toggle and fields in one row 2026-09-28 21:30:30 +02:00