Juan Denis caa799ba1b Replace jwt_required with RBAC, use socket auth ...

Replace generic @jwt_required() usage with role-based decorators and switch Socket.IO token handling to the auth payload.

- Replace jwt_required with viewer_required/admin_required across API modules (backend/app/api/cron.py, firewall.py, ftp.py, git.py, metrics.py) and update imports accordingly.
- Require JWT for previously public system/private endpoints (backend/app/api/system.py, private_urls.py).
- Change Socket.IO server connection handler to accept auth payload and read token from auth (backend/app/sockets.py) to avoid token leakage in query strings.
- Update frontend clients to send token via socket auth instead of query (frontend/src/pages/WordPressProject.jsx, frontend/src/services/socket.js).

These changes add finer-grained RBAC control for endpoints and improve socket auth security by removing tokens from URLs/logs.

2026-02-08 23:14:13 -05:00

..

app

Replace jwt_required with RBAC, use socket auth

2026-02-08 23:14:13 -05:00

templates

Update template icons and enhance sidebar user menu

2026-01-27 20:53:57 -05:00

.env.example

Add configurable dev paths and centralize path management

2026-01-28 21:12:55 -05:00

.gitignore

Initial project structure and core API implementation

2026-01-17 04:22:12 -05:00

cli.py

Add lightweight auto-migration for missing DB columns

2026-01-27 22:07:59 -05:00

config.py

Add configurable dev paths and centralize path management

2026-01-28 21:12:55 -05:00

Dockerfile

Fix SQLite database path for Docker volume mount

2026-01-19 01:47:02 +00:00

requirements.txt

Add notification webhooks support (Discord, Slack, etc.)

2026-01-18 01:13:30 -05:00

run.py

Add unified dev scripts and improve login UX

2026-01-25 18:33:25 -05:00

wp-cli.phar

Add multi-site WordPress management and UI overhaul

2026-01-28 22:15:57 -05:00