bookstack

Commit Graph

Author	SHA1	Message	Date
Dan Brown	78f9c01519	Started on some MFA access-time checks Discovered some difficult edge cases: - User image loading in header bar when using local_secure storage - 404s showing user-specific visible content due to content listing on 404 page since user is in semi-logged in state. Maybe need to go through and change up how logins are handled to centralise and provide us better control at login time to prevent any auth level.	2021-07-16 23:23:36 +01:00
Dan Brown	09c2814dc7	Added role based MFA control - Added new DB column for control and role updated create/update actions. - Created new middleware as a start to actual enforcement logic. - Added indicator to role list of whether MFA is enforced.	2021-07-03 13:34:48 +01:00

Author

SHA1

Message

Date

Dan Brown

78f9c01519

Started on some MFA access-time checks

Discovered some difficult edge cases:
- User image loading in header bar when using local_secure storage
- 404s showing user-specific visible content due to content listing on
  404 page since user is in semi-logged in state. Maybe need to go
  through and change up how logins are handled to centralise and
  provide us better control at login time to prevent any auth level.

2021-07-16 23:23:36 +01:00

Dan Brown

09c2814dc7

Added role based MFA control

- Added new DB column for control and role updated create/update actions.
- Created new middleware as a start to actual enforcement logic.
- Added indicator to role list of whether MFA is enforced.

2021-07-03 13:34:48 +01:00

2 Commits