sjg/trx-rs
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Complete managed account lifecycle
CI / test (push) Successful in 8m12s
Details
CI / frontend (push) Successful in 4m15s
Details
CI / reuse (push) Successful in 5s
Details
CI / lint (pull_request) Successful in 2m24s
Details
CI / test (pull_request) Successful in 9m6s
Details
CI / frontend (pull_request) Successful in 5m17s
Details
CI / reuse (pull_request) Successful in 5s
Details
CI / lint (push) Successful in 2m26s
Details

Browse Source
This commit was merged in pull request #63.
This commit is contained in:
sjg
2026-08-11 07:49:53 +02:00
parent 34507ffa17
commit 5e9dae02c7
33 changed files with 1224 additions and 449 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/Architecture.md
+6 -3
View File
@@ -925,9 +925,12 @@ main
### HTTP Frontend Auth
- Optional token or HTTP Basic Auth middleware
- Configured in `[frontends.http.auth]`
- Rate limiting supported
- Optional Argon2id-backed managed accounts with HttpOnly session cookies
- Composable Read, Control, Write, and Administrator roles, with policy shared by middleware and handlers
- Atomic JSON persistence with migration from the legacy single-role schema
- Account enable/disable, administrator CRUD, self-service password changes, and session revocation on security changes
- A database invariant always preserves at least one enabled administrator
- Per-IP login rate limiting; configured in `[frontends.http.auth]`
### Transport Security