MarSeventh 5e48fde2ca feat: session-based auth with password hashing ...

- Add passwordHash.js: SHA-256 + salt hashing with plaintext backward compatibility
- Add sessionManager.js: HttpOnly cookie sessions with separate admin_session/user_session
- Add sessionCheck.js: session validation endpoint for frontend route guards
- Add logout.js: session destruction endpoint with authType support
- Update login.js: return user_session cookie on successful login
- Update check.js: return admin_session cookie on successful admin auth
- Update _middleware.js: check admin_session before Basic Auth, remove WWW-Authenticate header
- Update security.js: hash passwords on save, mask in GET, clear sessions on password change
- Update dualAuth.js/userAuth.js: use verifyPassword and session validation

2026-04-17 23:11:45 +08:00

..

bing/wallpaper

目录树设置和体验优化

2026-03-01 11:25:39 +08:00

manage

feat: session-based auth with password hashing

2026-04-17 23:11:45 +08:00

public

目录树设置和体验优化

2026-03-01 11:25:39 +08:00

_middleware.js

目录树设置和体验优化

2026-03-01 11:25:39 +08:00

channels.js

目录树设置和体验优化

2026-03-01 11:25:39 +08:00

directoryTree.js

目录树设置和体验优化

2026-03-01 11:25:39 +08:00

fetchRes.js

目录树设置和体验优化

2026-03-01 11:25:39 +08:00

login.js

feat: session-based auth with password hashing

2026-04-17 23:11:45 +08:00

logout.js

feat: session-based auth with password hashing

2026-04-17 23:11:45 +08:00

sessionCheck.js

feat: session-based auth with password hashing

2026-04-17 23:11:45 +08:00

userConfig.js

目录树设置和体验优化

2026-03-01 11:25:39 +08:00