CyberMind-FR 5c46ad864a fix(auth): require_jwt tries Bearer then cookie so a stale token can't shadow a live session ... A present-but-stale localStorage Bearer was used exclusively, ignoring a valid secubox_session cookie, so every webui 401'd into a /login.html loop. Now both sources are tried (Bearer first, then cookie); 401 only if neither validates. Strictly more permissive — no regression for working Bearer clients. Co-Authored-By: Gerald KERMA <devel@cybermind.fr>		2026-07-16 10:12:32 +02:00
..
classifiers	feat(secubox-core+5modules+toolbox): Phase 2c receiving modules enrichment (ref #490)	2026-06-13 08:00:18 +02:00
opad	docs(spec): CMSD-1.0 license headers across the codebase	2026-05-12 09:10:37 +02:00
tests	feat: Media Buffer Phase 2 — HLS reassembly via read-time URL join (#815)	2026-07-04 18:17:40 +02:00
__init__.py	feat(ui): Universal hybrid-skin theme with global status/menu bars	2026-05-08 16:42:51 +02:00
auth.py	fix(auth): require_jwt tries Bearer then cookie so a stale token can't shadow a live session	2026-07-16 10:12:32 +02:00
config.py	feat: cookie audit pipeline (RGPD / ePrivacy reconciler) (#159)	2026-05-16 13:53:40 +02:00
feature_flags.py	feat(core): feature_flags reader with auth.enforce_v2 + require_totp_for_admin (ref #120)	2026-05-13 08:34:10 +02:00
health.py	feat(ui): Universal hybrid-skin theme with global status/menu bars	2026-05-08 16:42:51 +02:00
hls.py	feat: Media Buffer Phase 2 — HLS reassembly via read-time URL join (#815)	2026-07-04 18:17:40 +02:00
kiosk.py
logger.py
media_buffer.py	feat: SecuBox Media Buffer Phase 1 — dashcam capture + replay + metatag lifecycle (#814)	2026-07-04 18:15:58 +02:00
media_catch.py	Rapport kbin fidèle (PDF donut-grids + media types) + WebUI DPI + incident hardening (#787)	2026-07-03 12:27:28 +02:00
mitm_ingest.py	feat(secubox-toolbox+core+5modules): Phase 2b wire mitm addons to receiving modules (ref #488)	2026-06-05 07:46:50 +02:00
requirements.txt	docs(spec): CMSD-1.0 license headers across the codebase	2026-05-12 09:10:37 +02:00
rule_engine.py	feat(secubox-core+toolbox): generative rule engine + sensitivity profiles + whitelist expansion + iOS captive fix (ref #492)	2026-06-05 09:45:04 +02:00
system.py
user_store.py	feat(core): secubox-user-sync — provisioning push of master users into apps (ref #410)	2026-05-29 07:55:58 +02:00
whitelist.py	feat(secubox-core+toolbox): Phase 3 transparency layer (whitelist + analysis-status + quality scoring) (ref #492)	2026-06-05 08:13:45 +02:00