wmantly efe3e514b0 chore(release): public-release readiness and security fixes for 1.1.16 ...

Security:
- Escape user-supplied values in LDAP filters and DNs (group_ldap.js, user_ldap.js)
- Replace Math.random() token/UUID/OTP generation with crypto.randomUUID / crypto.randomInt
- Refuse startup when oauth.jwtSecret is missing or placeholder

Fixes:
- Correct from-address template rendering in email.js

Packaging:
- Remove private flag and bump version to 1.1.16

Co-Authored-By: Claude <noreply@anthropic.com>

2026-07-18 22:08:11 -04:00

..

bin

Updated frontend

2026-07-01 11:10:09 -04:00

conf

White-label: title/logo now driven by conf (closes #6)

2026-07-16 17:26:01 -04:00

controller

Updated frontend

2026-07-01 11:10:09 -04:00

middleware

Air-gap: remove dead CDN reference + in-app /docs

2026-07-16 15:33:46 -04:00

models

chore(release): public-release readiness and security fixes for 1.1.16

2026-07-18 22:08:11 -04:00

public

Unify service accounts to one kind, add manager field, make homeDirectory/loginShell editable

2026-07-17 00:32:19 -04:00

routes

chore(release): public-release readiness and security fixes for 1.1.16

2026-07-18 22:08:11 -04:00

services

Add standalone backup script and admin update-check banner

2026-07-15 22:33:55 -04:00

tests

Add CI (Jest against the real bundled image); fix ppolicy pwdLockout default

2026-07-16 16:54:05 -04:00

utils

Add standalone backup script and admin update-check banner

2026-07-15 22:33:55 -04:00

views

Add plain-language concept docs; fix docs viewer rendering; link API tokens

2026-07-17 21:49:27 -04:00

.gitignore

beta

2020-05-03 18:22:51 -04:00

app.js

Unify service accounts to one kind, add manager field, make homeDirectory/loginShell editable

2026-07-17 00:32:19 -04:00

package-lock.json

Bump version to 1.1.15; update CHANGELOG

2026-07-18 01:18:05 -04:00

package.json

chore(release): public-release readiness and security fixes for 1.1.16

2026-07-18 22:08:11 -04:00