wmantly 25b0d57a97 feat(conf): mask SMTP/OAuth secrets + leave-blank-to-keep on /conf (v1.17.1) ...

GET /api/conf no longer returns smtp.pass / oauth.jwtSecret in cleartext
(masked to ********). POST treats a blank or ******** secret submission as
"keep the stored value," so editing the From address or token lifetimes no
longer requires re-entering or leaks the SMTP password / JWT secret. The /conf
form fields carry a leave-unchanged hint. Storage stays in OpenBao at
secret/sso-manager/conf (unchanged); no theta-suite policy change needed.

Co-Authored-By: Claude <noreply@anthropic.com>

2026-08-01 21:15:16 -04:00

..

email_templates

Updated frontend

2026-07-01 11:10:09 -04:00

bottom.ejs

Unify the front-end UI shell across the theta42 apps

2026-07-25 22:57:34 -04:00

conf.ejs

feat(conf): mask SMTP/OAuth secrets + leave-blank-to-keep on /conf (v1.17.1)

2026-08-01 21:15:16 -04:00

directory.ejs

feat: real plugin system with loadable instances + OpenBao secrets (v1.17.0)

2026-08-01 20:33:57 -04:00

discovery.ejs

fix(tests): remove native dialogs and bypass gitguardian

2026-08-01 01:36:00 -04:00

docs_index.ejs

Add header help icon and in-app docs search

2026-07-17 19:22:27 -04:00

docs_page.ejs

Air-gap: remove dead CDN reference + in-app /docs

2026-07-16 15:33:46 -04:00

error.ejs

feat(release): v1.14.0 discovery and conf pages

2026-08-01 01:21:27 -04:00

groups.ejs

Release 1.11.0: end-user catalog, access requests, nested groups

2026-07-31 01:22:08 -04:00

impersonate_modal.ejs

Remove all native alert()/confirm() calls

2026-07-27 16:50:07 -04:00

index.ejs

beta

2020-05-03 18:22:51 -04:00

invite_email.ejs

zoom fixes

2020-08-08 20:52:24 -04:00

invite.ejs

Adopt @simpleworkjs/frontend's messages/modal/validate modules

2026-07-27 13:35:51 -04:00

landing.ejs

feat(release): v1.14.0 discovery and conf pages

2026-08-01 01:21:27 -04:00

login.ejs

Explain why the user landed on the login page

2026-07-28 13:09:53 -04:00

oauth_authorize.ejs

Adopt @simpleworkjs/frontend's messages/modal/validate modules

2026-07-27 13:35:51 -04:00

oauth_logout.ejs

oath fixes

2026-07-02 16:22:16 -04:00

onboarding.ejs

Remove all native alert()/confirm() calls

2026-07-27 16:50:07 -04:00

overview.ejs

Add cross-app super admin group; rename Executive page to Overview

2026-07-30 11:56:58 -04:00

plugins.ejs

feat: real plugin system with loadable instances + OpenBao secrets (v1.17.0)

2026-08-01 20:33:57 -04:00

profile.ejs

SSO profile and catalog page improvements

2026-07-31 14:25:18 -04:00

reset_password.ejs

front end fixes

2020-07-01 16:08:19 -04:00

token.ejs

Updated frontend

2026-07-01 11:10:09 -04:00

top.ejs

Add LDAP group membership management to the Directory modal, pin Groups sort bar, merge Directory columns

2026-07-29 21:50:30 -04:00

tos.ejs

Make Terms of Service editable at runtime by admins (closes #39)

2026-07-16 13:44:46 -04:00

user_form.ejs

ui: remove mobile phone field from user form

2026-07-23 02:20:59 -04:00

users.ejs

SSO profile and catalog page improvements

2026-07-31 14:25:18 -04:00

vault.ejs

v1.16.1: fix 401 on /conf and /vault for logged-in admins (#137)

2026-08-01 18:42:51 -04:00