Josh Hawkins 152e585206 Authentication improvements (#21194) ... * jwt permissions * add old password to body req * add model and migration need to track the datetime that passwords were changed for the jwt * auth api backend changes - use os.open to create jwt secret with restrictive permissions (0o600: read/write for owner only) - add backend validation for password strength - add iat claim to jwt so the server can determine when a token was issued and reject any jwts issued before a user's password_changed_at timestamp, ensuring old tokens are invalidated after a password change - set logout route to public to avoid 401 when logging out - issue new jwt for users who change their own password so they stay logged in * improve set password dialog - add field to verify old password - add password strength requirements * frontend tweaks for password dialog * i18n * use verify endpoint for existing password verification avoid /login side effects (creating a new session) * public logout * only check if password has changed on jwt refresh * fix tests Fix migration 030 by using raw sql to select usernames (avoid ORM selecting nonexistent columns) * add multi device warning to password dialog * remove password verification endpoint Just send old_password + new password in one request, let the backend handle verification in a single operation		2025-12-08 09:02:28 -07:00
..
__init__.py	Use custom body for the export recordings endpoint (#14908)	2024-11-10 20:26:47 -07:00
app_body.py	Authentication improvements (#21194)	2025-12-08 09:02:28 -07:00
classification_body.py	Implement Wizard for Creating Classification Models (#20622)	2025-10-23 13:27:28 -06:00
events_body.py	Miscellaneous fixes (#21141)	2025-12-04 12:19:07 -06:00
export_recordings_body.py	Fix small typo (#14915)	2024-11-11 05:02:46 -07:00
export_rename_body.py	fix renaming exports with a slash (#16588)	2025-02-14 19:18:14 -07:00
review_body.py	Add ability to mark review items as unreviewed (#20446)	2025-10-12 08:10:56 -05:00