6 Commits

Include renames

Author	SHA1	Message	Date
iamdoubz	97e67e347d	auth: security audit fixes, rate limits on every route ... Two separate reviews of the SSO branch and all 207 API routes (spec 12 §8.6). Every route was guarded as meant. Fixed, each with a test: - login: a directory 503 counts as a failed sign-in; a locked directory account is a refused password, not "unavailable" - open redirect after OpenID sign-in (a tab in next) - directory email matching only for non-admins without their own password; others connect on My settings (POST /api/me/identities/ldap); only admins disconnect a directory account - OpenID session check reads the refreshed ID token's claims too - connect is POST /api/auth/oidc/connect (CSRF header) - stored bind password, client secret and SMTP password tied to their server - 409 role_managed when a provider sets the role; empty Contrack PATCH is a 400 - @fastify/rate-limit on every route (RATE_LIMIT_PER_MINUTE), 10/min on Test buttons; a password asked again shares the login limiter Live tests pass against lldap 0.6.3, Samba 4 AD and Keycloak 26.8.1.	2026-10-26 09:46:23 -05:00
iamdoubz	73963ee3a3	auth: OpenID session check, live Keycloak test, sign-in guide (S3) ... Spec 12 S3: job oidcCheck refreshes every OpenID session at the provider every 15 minutes and applies groups and role again; invalid_grant ends the session, an outage doesn't. A live test makes a throwaway Keycloak realm and signs in through its login form (passed against 26.8.1). NODE_EXTRA_CA_CERTS for a private CA. Admin guide: docs/admin-guide/sign-in.md.	2026-10-25 15:14:59 -05:00
iamdoubz	692dd59552	contacts: Contrack as the robust contacts (C3), picked in Settings or the setup wizard ... Spec 11 §4: contacts.provider and contacts.contrack (local address only, company token write-only), each person's own token (users.contrack_token_enc, migration 0010) in My settings, books read from Contrack with a 5-minute cache, Add to contacts and accepted shares created in Contrack, the company account on desk phones. Setup wizard step 8 Contacts. deploy/contrack (2.0.2, pinned), Caddy/nginx blocks, decision 0003, admin guide Contacts. Tested against a fake and a real Contrack 2.0.2 (contrack-live.test.ts).	2026-10-23 15:23:49 -05:00
iamdoubz	a26a5ca740	ai: Settings → AI (local endpoints only, with tests), the AI stack, voicemail transcripts	2026-10-21 18:37:13 -05:00
iamdoubz	65a0438dde	diagnostics: System → Diagnostics with a network test probe; RTP_PORT_START/END ... The server checks itself (public IP, DNS, local networks, phone ACL, SIP transports, free audio ports) and says how to fix each problem. A quick or complete network test asks the probe (apps/probe, own image) to test this server from outside: HTTP/HTTPS, SIP over UDP/TCP/TLS, the browser phone's /ws, sampled audio ports. The probe only tests the address that asks. The audio port range comes from RTP_PORT_START/END (default 10000-20000).	2026-10-21 12:37:16 -05:00
iamdoubz	d0de0c9039	deploy: docker compose stack, api image, install script, proxy configs ... Postgres and AMI secrets are hex (the password goes into DATABASE_URL). Task: M0-T6	2026-10-17 14:32:57 -05:00