secubox/secubox-deb
1
0
Fork 0
mirror of https://github.com/CyberMind-FR/secubox-deb.git synced 2026-07-28 21:17:36 +00:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity
a64257ca58
secubox-deb/packages/secubox-auth
History
CyberMind-FR b50387a06b fix(auth): record client IP + user-agent on the MFA login paths 
/login/mfa and /totp/confirm both hardcoded "ip": "" and omitted user_agent
entirely, while only the password path captured them. admin is forced-TOTP,
so EVERY real admin login took the MFA path — every session row landed
unauditable (who logged in, from where, with what), and the users webui
sessions tab rendered blanks for data it was already asking for.

Factor the extraction into _client_meta(request) (X-Forwarded-For first: nginx
and HAProxy front every login, so request.client.host is only ever the proxy)
and use it on all three paths.

Verified by driving the real /login/mfa handler in-process with
SECUBOX_AUTH_SESSIONS pointed at a temp file: the session row now records
ip=192.168.1.77 (the first XFF hop, not the proxy) and the full user-agent.

Co-Authored-By: Gerald KERMA <devel@cybermind.fr>
2026-07-17 10:35:07 +02:00
..
api fix(auth): record client IP + user-agent on the MFA login paths 2026-07-17 10:35:07 +02:00
debian feat(auth): webui-toggleable admin-TOTP requirement (default off) + per-user 2FA reset 2026-07-11 06:52:56 +02:00
menu.d feat(navbar): consolidate to 6 charter categories + fix dropped menu entries (closes #306) (#307) 2026-05-21 10:03:05 +02:00
nginx feat: modular nginx config + hub roadmap + new modules 2026-03-21 20:34:01 +01:00
tests feat(auth): webui-toggleable admin-TOTP requirement (default off) + per-user 2FA reset 2026-07-11 06:52:56 +02:00
www feat(webui): fleet reskin — apply hybrid-dark cyan overlay to all 116 crt-light panels 2026-07-10 08:40:10 +02:00
README.md docs(wiki): refonte 126 modules — snapshots WebUI déterministes + READMEs 4 langues (ref #742) 2026-06-26 10:14:14 +02:00

README.md

🔐 Auth Guardian

Unified authentication management

Category: Security

Screenshot

Auth Guardian

Features

  • OAuth2
  • LDAP
  • 2FA/TOTP
  • Session management

Installation

# Add SecuBox repository
curl -fsSL https://apt.secubox.in/install.sh | sudo bash

# Install package
sudo apt install secubox-auth

Configuration

Configuration file: /etc/secubox/auth.toml

API Endpoints

  • GET /api/v1/auth/status - Module status
  • GET /api/v1/auth/health - Health check

License

LicenseRef-CMSD-1.0 (Source-Disclosed License) — CyberMind © 2024-2026. See LICENCE-CMSD-1.0.md.