3954 Commits

Author	SHA1	Message	Date
HadleySo	df355ebd7d	Changing JWT low-security to alg none check only. DOCS ok	2026-03-19 22:33:17 -05:00
HB9HIL	d3f22710aa	fixed documentation links	2026-03-19 16:42:52 +01:00
HadleySo	6ec147bc83	require username claim in JWT	2026-03-18 22:41:00 -05:00
HadleySo	35d9e0060c	reorder user JWT update and maint check	2026-03-18 22:25:40 -05:00
HadleySo	5f68295c91	Hard code expected values for manual user add	2026-03-18 18:25:58 -05:00
HadleySo	ea517239ec	sso fields with user and clubstation add	2026-03-18 18:19:34 -05:00
HadleySo	3018b8981a	Maintain style when badge and tooltip customised	2026-03-18 18:02:43 -05:00
HadleySo	127ed09345	disable admin send password reset email when direct login disable	2026-03-18 17:36:30 -05:00
HadleySo	012587e479	handle when password field not in UI	2026-03-18 17:21:41 -05:00
HB9HIL	926b4f47f1	allow customizing the locked data batch in user edit	2026-03-18 22:52:15 +01:00
HB9HIL	26340f3ca1	refactoring	2026-03-18 15:26:31 +01:00
Fabian Berg	864d8d3ca1	Merge branch 'dev' into dev	2026-03-18 09:34:00 +01:00
phl0	8c6779e482	Check a little more specific	2026-03-18 09:00:48 +01:00
phl0	e0df05817c	Merge remote-tracking branch 'upstream/dev' into fixArray	2026-03-18 08:38:58 +01:00
phl0	66ea98f4c4	Fix description	2026-03-18 08:34:52 +01:00
Fabian Berg	5d6c57b738	Merge branch 'dev' into dev	2026-03-17 08:45:36 +01:00
Fabian Berg	505052dad1	Merge pull request #3087 from HB9HIL/dashboard_warn ... we can omit this message here. a little bit too much red warnings	2026-03-16 18:07:44 +01:00
HB9HIL	f42ca18cde	we can omit this message here. a little bit too much red warnings	2026-03-16 16:12:23 +01:00
HB9HIL	8e3229b474	fix $query after user was created	2026-03-16 16:11:05 +01:00
HB9HIL	0f1a2f1f89	define the type	2026-03-16 15:59:09 +01:00
HB9HIL	30fe503d9b	load the user model	2026-03-16 15:57:38 +01:00
HB9HIL	180edac244	be safe the execution stopps in case the redirect fails	2026-03-16 15:56:25 +01:00
HB9HIL	ae99295777	refactored class structure	2026-03-16 15:54:28 +01:00
Joerg (DJ7NT)	4dc2c5d56f	Merge pull request #3082 from int2001/sec_keyhandling ... Sec keyhandling	2026-03-16 12:20:19 +01:00
int2001	5f08a0bd73	Use CSRF-Token for Edit/Del User as well	2026-03-16 11:04:00 +00:00
HB9HIL	c8c366827c	we only need $data once in the same scope	2026-03-16 11:34:45 +01:00
HB9HIL	41290c5fc2	dynamic session key for csrf token	2026-03-16 11:32:57 +01:00
int2001	df74b2ea21	Centralize Token-Function	2026-03-16 09:37:02 +00:00
int2001	fcf52ab56d	Add CSRF-Tokens for Station and User handling	2026-03-16 08:41:50 +00:00
int2001	5734419e78	convert API generate/delete actions to POST-only to mitigate GET-based CSRF	2026-03-16 07:44:08 +00:00
HB9HIL	feefd7ac84	dead code	2026-03-16 01:07:41 +01:00
HB9HIL	054f66d07f	escape some api stuff	2026-03-16 00:57:34 +01:00
HB9HIL	80f37bdad7	bands model is loaded in every function so we can move it to the cunstructor	2026-03-16 00:52:05 +01:00
HB9HIL	52b92ca846	format code	2026-03-16 00:50:45 +01:00
HB9HIL	77f34cd942	add userid to band deletion	2026-03-16 00:50:21 +01:00
HB9HIL	f9a7548b4a	clean xss clean	2026-03-16 00:47:52 +01:00
Fabian Berg	7d110116a1	Merge branch 'dev' into dev	2026-03-15 18:19:24 +01:00
phl0	c92c297bc6	Fix more return checks for list_logbook_relationships	2026-03-15 11:03:29 +01:00
phl0	cc4dfe2d1e	Fix logic	2026-03-15 10:40:36 +01:00
phl0	5c94cf419b	Fix other function calls as well	2026-03-15 09:14:26 +01:00
phl0	6f5864dcb1	Check returned array properly	2026-03-15 09:11:01 +01:00
phl0	6d68e6459d	Use logbook ID instead of public slug for pulling worked grids	2026-03-15 09:04:05 +01:00
Andreas Kristiansen	ce7f62130d	[WAC Award] Query speedup	2026-03-11 11:22:14 +01:00
HadleySo	00ab6f75e8	Pull callsign JWT claim from config	2026-03-09 21:44:04 -05:00
HB9HIL	651845bf77	add option to hide the normal login form	2026-03-09 12:02:37 +01:00
HB9HIL	4ed08b379c	improve logging	2026-03-08 23:40:34 +01:00
HB9HIL	c049434f2a	external_account flag for sso accounts	2026-03-08 23:28:03 +01:00
HB9HIL	ee5dd2425f	jwt logic	2026-03-08 18:32:17 +01:00
HB9HIL	ce04003621	added missing user_config	2026-03-08 13:39:39 +01:00
HB9HIL	670afc0f50	catch null	2026-03-08 12:53:52 +01:00