Security hardening#64

Merged

iu2frl merged 38 commits intodevfrom

security-hardening

Mar 26, 2026

Commits on Mar 25, 2026

Enhance WebSocket session handling by validating boot ID and revoked tokens
Luca IU2FRL
committed
Add connections security guidelines for host fingerprint verification
Luca IU2FRL
committed
Implement FTPS certificate thumbprint validation and handling
Luca IU2FRL
committed
Enhance error handling in FTP session opening by preserving exception context
Luca IU2FRL
committed
Implement SSH host fingerprint validation and trust confirmation for SFTP and terminal sessions
Luca IU2FRL
committed
Refactor SFTP and terminal session tests to remove unused parameters and improve clarity
Luca IU2FRL
committed
Add support for clearing trusted fingerprints in device updates
Luca IU2FRL
committed
Enhance SSH host fingerprint probing by adding username, password, and private key path parameters
Luca IU2FRL
committed
Enhance SSH host fingerprint probing by capturing server host key during connection establishment and validating against expected fingerprint
Luca IU2FRL
committed
Implement fingerprint deletion functionality in DeviceForm component
Luca IU2FRL
committed
Add FingerprintTrustModal component and integrate SSH/FTPS trust handling in FileManager and FtpFileManager
Luca IU2FRL
committed
Refactor IP extraction logic to use trusted-proxy rules in get_client_ip function
Luca IU2FRL
committed
Add tests for audit IP handling based on proxy trust status in WebSocket connections
Luca IU2FRL
committed
Implement WebSocket ticketing for terminal authentication and update related components
Luca IU2FRL
committed
Implement auth cookie handling and session storage for token expiry
Luca IU2FRL
committed
Enhance error handling in open_session for SSH connections and update tests for session management
Luca IU2FRL
committed
Add SSH host fingerprint handling in open_session tests
Luca IU2FRL
committed
Add SSH host fingerprint probing and trust parameter to SFTP session creation
Luca IU2FRL
committed

Commits on Mar 26, 2026

Add mock for SSH host fingerprint probing in direct tests
Luca IU2FRL
committed
Add mock for revoked token check in direct websocket tests and update AsyncSessionLocal patching
Luca IU2FRL
committed
Refactor test_ws_direct_audit_ip_falls_back_to_source_ip to use mocked client IP
Luca IU2FRL
committed
Add FTPS session handling tests for certificate validation and errors
Luca IU2FRL
committed
Add test for update_device to normalize fingerprint fields
Luca IU2FRL
committed
Add tests for SSH host fingerprint handling in open_session and terminal_ws
Luca IU2FRL
committed
Split terminal testing for better readability
Luca IU2FRL
committed
Add tests for SSH host fingerprint handling in open_session
Luca IU2FRL
committed
Add SSH host fingerprint handling to open session permission denied test
Luca IU2FRL
committed
Add tests for pinned SSH host fingerprint validation and probing behavior
Luca IU2FRL
committed
Add tests for SSH host key verification and mismatch handling in open_sftp_session
Luca IU2FRL
committed
Add tests for handling FTPS thumbprint mismatches and exceptions
Luca IU2FRL
committed
Refactor WebSocket authentication to use ticket-based validation and update related tests
Luca IU2FRL
committed
Enforce non-default ADMIN_PASSWORD in non-development environments and add related tests
Luca IU2FRL
committed
Enhance security by implementing trusted proxy checks for secure cookies in authentication flow and add related tests
Luca IU2FRL
committed
Implement FTPS_ALLOW_INSECURE validation for non-development environments and add related tests
Luca IU2FRL
committed
Enhance authentication flow to support cookie-based authorization and update related tests
Luca IU2FRL
committed
Refactor key pair generation in DeviceForm to use API function and remove direct fetch calls
Luca IU2FRL
committed
Implement connection monitoring and session recovery in App component with related tests
Luca IU2FRL
committed
Refactor authentication handling to allow for optional request parameter and clear cookies in session tests
Luca IU2FRL
committed