1
0
Fork 0
mirror of https://github.com/retspen/webvirtcloud synced 2026-11-08 11:16:47 +00:00
webvirtcloud/console
catborise b7a39d24e2 fix(console): accept only signed host:uuid:user_id tokens in novncd
novncd accepted signed tokens without the user part, which skipped the
per-user access check, and accepted unsigned "host-uuid" tokens whenever
"test" appeared in sys.argv. The console view always signs
host:uuid:user_id, so anything else is now rejected with PermissionError,
and the user check always runs.
2026-10-02 20:35:29 +03:00
..
migrations Add app 2015-02-27 14:25:41 +02:00
templates feat(console): remove deprecated SPICE support in favor of noVNC 2026-09-26 22:43:40 +03:00
__init__.py Add app 2015-02-27 14:25:41 +02:00
models.py Add app 2015-02-27 14:25:41 +02:00
novncd fix(console): accept only signed host:uuid:user_id tokens in novncd 2026-10-02 20:35:29 +03:00
socketiod refactor(console): replace deprecated optparse with argparse and fix regex escape sequences 2026-09-24 22:08:08 +03:00
sshtunnels.py format python code with black 2022-11-02 08:54:35 +03:00
test_cli_parsers.py refactor(console): replace deprecated optparse with argparse and fix regex escape sequences 2026-09-24 22:08:08 +03:00
tests.py fix(console): accept only signed host:uuid:user_id tokens in novncd 2026-10-02 20:35:29 +03:00
views.py fix: add an authorization matrix test and close the endpoints it finds 2026-10-02 20:33:12 +03:00