Commit Graph

241 Commits

Author SHA1 Message Date
LukeGus
d9910c7667 Reduce image size and fix nginx errors 2025-09-29 21:42:00 -05:00
LukeGus
59094ec25d Reduce image size, update feature requset yamls and fix OIDC 2025-09-29 21:21:51 -05:00
LukeGus
a09fe0a271 Update package version 2025-09-29 09:55:26 -05:00
LukeGus
da3b5ff089 Test new build image 2025-09-29 09:35:43 -05:00
LukeGus
144171d1fa General bug fixes in terminal and file manager and fixed credential errors in production 2025-09-28 23:54:12 -05:00
LukeGus
63e776f183 Code cleanup 2025-09-28 21:36:20 -05:00
LukeGus
58b28cab50 Fix credentials not sending right and terminals/file manager not connecting 2025-09-28 21:26:42 -05:00
LukeGus
f59faaf887 Fix backend SSH issues 2025-09-28 19:28:46 -05:00
LukeGus
60b4040f11 Fix electron version checking 2025-09-28 19:00:43 -05:00
LukeGus
67ab3e50ff Fix electron SSL 2025-09-28 18:02:42 -05:00
LukeGus
5e0008ee9d Fix docker build 2025-09-28 17:40:15 -05:00
LukeGus
0fce07f124 Fix docker build 2025-09-28 17:35:46 -05:00
LukeGus
7865a28d3d Fix docker build 2025-09-28 17:33:05 -05:00
LukeGus
46ce2ce678 Fix docker build 2025-09-28 17:29:35 -05:00
LukeGus
479f68f417 Fix docker build 2025-09-28 17:26:34 -05:00
LukeGus
58653a6002 Fix docker build 2025-09-28 17:23:53 -05:00
LukeGus
6ec5a4106b Fix docker build 2025-09-28 17:20:58 -05:00
LukeGus
32921f9b7f Fix docker build 2025-09-28 17:17:20 -05:00
LukeGus
0c49e17c7d Fix docker build 2025-09-28 17:10:39 -05:00
LukeGus
56c4e1ed19 Fix docker build 2025-09-28 17:06:51 -05:00
LukeGus
984cabdc2f Fix docker build 2025-09-28 17:03:43 -05:00
LukeGus
4b377659f6 Fix docker build and electron SSL 2025-09-28 17:00:05 -05:00
LukeGus
9969d17c57 Fix docker build 2025-09-28 16:53:04 -05:00
LukeGus
e670894e52 Fix docker build 2025-09-28 16:50:58 -05:00
LukeGus
d1b4345206 Update electron builds, fix backend issues 2025-09-28 16:45:24 -05:00
LukeGus
cfa7c26c49 Fix docker build error and SSL regeneration 2025-09-28 01:42:50 -05:00
LukeGus
e2146cdfbf Format 2025-09-28 01:32:08 -05:00
LukeGus
6eb304b8e4 Update packages and improve SSL generation 2025-09-28 01:30:25 -05:00
LukeGus
a79b640914 Fix credentials UI 2025-09-28 01:06:44 -05:00
LukeGus
bc8aa69099 Code cleanup 2025-09-28 00:23:00 -05:00
LukeGus
d2ba934f61 Completely remove PR 303 2025-09-27 01:15:18 -05:00
LukeGus
dfbaf0d2f1 Begin undo #303 2025-09-27 00:51:37 -05:00
LukeGus
3691e22d49 Fix send reset code UI 2025-09-27 00:19:18 -05:00
LukeGus
b0f25a6971 Improved JWT security 2025-09-26 23:27:07 -05:00
LukeGus
2cd1cb64a3 Add session lock notifications and change timeouts 2025-09-26 23:05:33 -05:00
LukeGus
5afe225470 Fix certificate regeneration, svg files encrypting, and file manager being able to be dragged off screen. 2025-09-26 19:54:39 -05:00
LukeGus
54e7ac8bfd Fix encryption not loading 2025-09-26 17:46:10 -05:00
LukeGus
33aa648d28 Fix encryption not loading 2025-09-26 17:17:11 -05:00
LukeGus
ab6b1e284f Fix nginx error 2025-09-26 16:59:54 -05:00
LukeGus
18517621d6 Fix build error 2025-09-26 16:42:35 -05:00
LukeGus
56e3194a7c Update legacy code and remove debugs 2025-09-26 16:37:31 -05:00
ZacharyZcR
b09cf89673 FEATURE: Docker log-based password recovery with KEK-DEK preservation (#303)
Breaking Changes:
- Adds compromise mode to zero-trust architecture for UX
- Enables password recovery via physical Docker access

Key Features:
- 6-digit recovery codes output to Docker logs for physical access control
- Recovery DEK layer preserves user encrypted data during password reset
- Zero-trust migration path for future security upgrade
- Critical fix for password reset data loss vulnerability

Security Model:
- Physical access required (Docker logs access)
- 1-minute code expiry with 3-attempt limit
- Recovery keys stored encrypted in database
- Gradual migration path to zero-trust mode

Technical Details:
- Schema: Added recovery_dek, backup_encrypted_dek, zero_trust_mode fields
- API: New /recovery/* endpoints for recovery flow
- UI: Complete password recovery interface redesign
- Crypto: Recovery layer in KEK-DEK architecture
- Migration: ZeroTrustMigration utility for future upgrades

Bug Fixes:
- Fixed critical password reset vulnerability causing permanent data loss
- Fixed JWT token storage inconsistency in recovery login
- Proper KEK-DEK re-encryption during password reset

Co-authored-by: ZacharyZcR <zacharyzcr1984@gmail.com>
2025-09-26 16:30:09 -05:00
LukeGus
0da4652a31 Add versioning system to electron, update nginx configurations for file uploads, fix UI issues in file manager 2025-09-26 16:28:37 -05:00
LukeGus
9b12515676 Fix env not loading after restart, update translsations, fix export DB nginx conf 2025-09-26 09:13:41 -05:00
LukeGus
62bc684fff Fix encryption not working after restarting 2025-09-26 00:29:13 -05:00
LukeGus
092c8e4218 Fix SSL docker issues 2025-09-25 23:55:06 -05:00
LukeGus
edbc2b978c Fix SSL terminals and fix SSL issues 2025-09-25 23:40:25 -05:00
LukeGus
9b1dbdcc0a Fix mobile UI and SSL 2025-09-25 22:56:45 -05:00
LukeGus
158e805e04 Fix docker build 2025-09-25 09:30:06 -05:00
LukeGus
f38cce1ffb Fix docker build 2025-09-25 09:26:38 -05:00