rcourtman
d716bbfdeb
fix(security): add proper authorization to sensitive endpoints
- /api/agent-install-command: require admin + settings:write scope
Previously only RequireAuth, allowing any authenticated user to mint
high-privilege API tokens (host-agent:manage)
- /api/system/ssh-config: require settings:write scope
Previously any authenticated token could modify ~/.ssh/config
- /api/system/verify-temperature-ssh: require settings:write scope
Previously any authenticated token could trigger SSH connection
attempts to arbitrary nodes (network scanning risk)
- /api/diagnostics: require admin privileges
Previously exposed API token metadata (IDs, hints, usage mapping)
to any authenticated token, enabling enumeration attacks
2026-02-03 17:47:40 +00:00
..
2026-01-22 00:45:04 +00:00
2026-01-04 17:57:51 +00:00
2026-01-22 16:43:24 +00:00
2026-02-03 17:05:01 +00:00
2026-02-03 16:24:42 +00:00
2026-02-03 17:47:40 +00:00
2025-12-02 22:31:44 +00:00
2025-12-29 17:25:21 +00:00
2026-02-03 16:24:28 +00:00
2025-12-29 17:25:21 +00:00
2026-01-03 11:14:17 +00:00
2026-01-22 13:49:05 +00:00
2025-12-02 14:48:57 +00:00
2026-01-28 16:52:35 +00:00
2026-01-29 12:08:38 +00:00
2026-01-30 19:02:14 +00:00
2026-01-25 21:08:44 +00:00
2026-02-01 16:27:10 +00:00
2026-02-01 23:27:11 +00:00
2025-12-29 17:25:21 +00:00
2026-01-25 21:08:44 +00:00
2025-12-12 23:13:40 +00:00
2026-01-28 16:52:35 +00:00
2026-02-03 17:32:44 +00:00
2026-02-03 17:32:44 +00:00
2026-01-25 21:08:44 +00:00
2026-01-18 13:41:00 +00:00
2026-01-25 21:08:44 +00:00
2026-02-03 16:49:57 +00:00
2025-12-31 23:07:01 +00:00
2025-12-29 17:25:21 +00:00
2025-12-29 17:25:21 +00:00
2025-11-26 14:10:21 +00:00
2026-01-01 22:29:15 +00:00
2026-02-03 17:40:58 +00:00
2026-01-01 22:29:15 +00:00
2026-02-03 17:16:27 +00:00