mirror of
https://github.com/CyberMind-FR/secubox-deb.git
synced 2026-07-29 09:14:33 +00:00
- Rename GET /auth/status → /auth/preflight (public) to stop shadowing the JWT-protected legacy /auth/status (dashboard voucher/session counts) - Engine.verify_totp_for_user gains window parameter; _verify_totp_ntp_aware now delegates to the engine (atomic write via _save + audit hook) - postinst: /etc/secubox 0750→0770, users.json 640→660 (group-write for atomic tempfile+rename) - Add replay-refusal assertion to test_totp_widened_window_accepts_drifted_code - Update login.html: loadStatus→loadPreflight, /api/v1/auth/status→/preflight Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| api | ||
| debian | ||
| menu.d | ||
| nginx | ||
| tests | ||
| www | ||
| README.md | ||
🔐 Auth Guardian
Unified authentication management
Category: Security
Screenshot
Features
- OAuth2
- LDAP
- 2FA/TOTP
- Session management
Installation
# Add SecuBox repository
curl -fsSL https://apt.secubox.in/install.sh | sudo bash
# Install package
sudo apt install secubox-auth
Configuration
Configuration file: /etc/secubox/auth.toml
API Endpoints
GET /api/v1/auth/status- Module statusGET /api/v1/auth/health- Health check
License
MIT License - CyberMind © 2024-2026
