wmantly efe3e514b0 chore(release): public-release readiness and security fixes for 1.1.16 ...

Security:
- Escape user-supplied values in LDAP filters and DNs (group_ldap.js, user_ldap.js)
- Replace Math.random() token/UUID/OTP generation with crypto.randomUUID / crypto.randomInt
- Refuse startup when oauth.jwtSecret is missing or placeholder

Fixes:
- Correct from-address template rendering in email.js

Packaging:
- Remove private flag and bump version to 1.1.16

Co-Authored-By: Claude <noreply@anthropic.com>

2026-07-18 22:08:11 -04:00

..

api_token.js

Add self-service API tokens (PATs) with UI + Bearer auth (#35)

2026-07-12 17:12:35 -04:00

auth.js

Documentation cleanup for public release (#38)

2026-07-13 23:21:27 -04:00

docs.js

Resolve doc cross-links by real filename as a fallback

2026-07-17 22:03:52 -04:00

group.js

Updated frontend

2026-07-01 11:10:09 -04:00

index.js

White-label: title/logo now driven by conf (closes #6)

2026-07-16 17:26:01 -04:00

notification.js

Add Unix/POSIX service accounts, distinct from LDAP bind-only ones

2026-07-15 20:52:50 -04:00

oauth_client.js

oath grpup fixes

2026-07-02 16:49:22 -04:00

oauth.js

chore(release): public-release readiness and security fixes for 1.1.16

2026-07-18 22:08:11 -04:00

token.js

Updated frontend

2026-07-01 11:10:09 -04:00

tos.js

Make Terms of Service editable at runtime by admins (closes #39)

2026-07-16 13:44:46 -04:00

update_check.js

Add standalone backup script and admin update-check banner

2026-07-15 22:33:55 -04:00

user.js

Add personal Unix group member management

2026-07-17 11:28:41 -04:00