mirror of
https://github.com/rcourtman/Pulse.git
synced 2026-09-21 10:43:36 +00:00
Pulse Monitor
8d17e2f2a9
addresses #340 - more secure authentication for Quick Token Setup Major security improvement: - Replaced URL-embedded tokens with 6-character one-time setup codes - Setup codes are entered interactively, never transmitted in URLs - Codes are hashed for storage and expire after 5 minutes - Each code can only be used once How it works: 1. User clicks "copy command" in Pulse UI 2. A unique setup code is generated and shown to the user 3. User runs the curl command on their Proxmox server 4. Script prompts for the setup code 5. Code is validated and node is auto-registered This approach is much more secure as no authentication tokens travel over the network in URLs, and the codes are short-lived and single-use.