@fonderie/admin 1.2.0 → 1.2.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +9 -5
- package/dist/index.cjs +1 -7
- package/dist/index.cjs.map +1 -1
- package/dist/index.d.cts +5 -3
- package/dist/index.d.ts +5 -3
- package/dist/index.js +1 -7
- package/dist/index.js.map +1 -1
- package/dist/ui/app.global.js +10 -10
- package/package.json +1 -1
package/dist/index.d.cts
CHANGED
|
@@ -52,9 +52,11 @@ interface IAdminOptions {
|
|
|
52
52
|
*/
|
|
53
53
|
operators?: boolean;
|
|
54
54
|
/**
|
|
55
|
-
* 64 hex chars (`openssl rand -hex 32`)
|
|
56
|
-
* secrets at rest (AES-256-GCM)
|
|
57
|
-
*
|
|
55
|
+
* OPTIONAL hardening. 64 hex chars (`openssl rand -hex 32`) that encrypt
|
|
56
|
+
* operators' authenticator secrets at rest (AES-256-GCM), so a database leak
|
|
57
|
+
* alone does not yield them. Unset ⇒ stored as-is — a supported setup: a
|
|
58
|
+
* leaked secret still needs the operator's password. Adding it later is safe;
|
|
59
|
+
* changing it once set invalidates every enrolled authenticator.
|
|
58
60
|
*/
|
|
59
61
|
operatorKey?: string;
|
|
60
62
|
}
|
package/dist/index.d.ts
CHANGED
|
@@ -52,9 +52,11 @@ interface IAdminOptions {
|
|
|
52
52
|
*/
|
|
53
53
|
operators?: boolean;
|
|
54
54
|
/**
|
|
55
|
-
* 64 hex chars (`openssl rand -hex 32`)
|
|
56
|
-
* secrets at rest (AES-256-GCM)
|
|
57
|
-
*
|
|
55
|
+
* OPTIONAL hardening. 64 hex chars (`openssl rand -hex 32`) that encrypt
|
|
56
|
+
* operators' authenticator secrets at rest (AES-256-GCM), so a database leak
|
|
57
|
+
* alone does not yield them. Unset ⇒ stored as-is — a supported setup: a
|
|
58
|
+
* leaked secret still needs the operator's password. Adding it later is safe;
|
|
59
|
+
* changing it once set invalidates every enrolled authenticator.
|
|
58
60
|
*/
|
|
59
61
|
operatorKey?: string;
|
|
60
62
|
}
|
package/dist/index.js
CHANGED
|
@@ -1559,7 +1559,7 @@ var uiHtml = (scriptPath) => `<!doctype html>
|
|
|
1559
1559
|
// src/module.ts
|
|
1560
1560
|
var DEFAULT_ADMIN_PATH = "/_admin";
|
|
1561
1561
|
var DEFAULT_CHECK_TIMEOUT_MS = 1e4;
|
|
1562
|
-
var ADMIN_VERSION = "1.2.
|
|
1562
|
+
var ADMIN_VERSION = "1.2.2";
|
|
1563
1563
|
function normalizeHostPattern(host) {
|
|
1564
1564
|
return host.trim().replace(/^[a-z][a-z0-9+.-]*:\/\//i, "").replace(/\/.*$/, "").toLowerCase();
|
|
1565
1565
|
}
|
|
@@ -1876,12 +1876,6 @@ var AdminModule = class {
|
|
|
1876
1876
|
severity: "error",
|
|
1877
1877
|
message: "operatorKey must be 64 hex characters (`openssl rand -hex 32`)"
|
|
1878
1878
|
});
|
|
1879
|
-
} else if (operatorsOn && !this.options.operatorKey) {
|
|
1880
|
-
problems.push({
|
|
1881
|
-
module: this.name,
|
|
1882
|
-
severity: "warning",
|
|
1883
|
-
message: "operatorKey is unset \u2014 operators' authenticator secrets are stored unencrypted. Set a 64-hex operatorKey."
|
|
1884
|
-
});
|
|
1885
1879
|
}
|
|
1886
1880
|
return problems;
|
|
1887
1881
|
}
|