rcourtman
fdc99418d6
security: add authentication to /api/security/apply-restart endpoint
...
CRITICAL FIX: This endpoint previously allowed unauthenticated users to
trigger service restarts, which is a denial-of-service vulnerability.
Now requires:
- Authentication (CheckAuth) when auth is configured
- Admin role for proxy auth users
- settings:write scope for API tokens
Initial setup (no auth configured yet) remains accessible to allow
first-time security configuration to trigger restart.
2026-02-03 19:55:29 +00:00
..
2026-01-25 21:08:44 +00:00
2026-01-19 19:26:18 +00:00
2026-01-24 22:42:23 +00:00
2026-01-22 22:33:33 +00:00
2026-01-30 19:02:14 +00:00
2026-02-02 15:18:51 +00:00
2026-01-25 21:08:44 +00:00
2026-02-01 16:28:49 +00:00
2026-01-25 21:08:44 +00:00
2026-02-01 16:27:25 +00:00
2026-02-02 23:01:29 +00:00
2026-01-25 21:08:44 +00:00
2026-01-30 19:02:14 +00:00
2026-02-02 23:17:40 +00:00
2026-01-25 21:08:44 +00:00
2026-01-25 21:08:44 +00:00
2026-02-01 23:26:32 +00:00
2026-02-03 18:40:31 +00:00
2026-02-02 18:59:44 +00:00
2026-02-01 18:08:02 +00:00
2026-02-02 23:01:29 +00:00
2026-02-02 22:02:22 +00:00
2026-01-25 21:08:44 +00:00
2026-02-02 22:02:22 +00:00
2026-01-24 22:41:43 +00:00
2026-02-01 16:28:49 +00:00
2026-01-25 21:08:44 +00:00
2026-01-22 16:42:39 +00:00
2026-01-19 19:26:18 +00:00
2026-02-03 18:39:15 +00:00
2026-02-03 17:40:58 +00:00
2026-01-24 22:42:23 +00:00
2026-01-22 00:42:23 +00:00
2026-01-22 00:42:23 +00:00
2026-01-24 22:42:23 +00:00
2026-01-10 12:55:02 +00:00
2026-01-25 21:08:44 +00:00
2026-01-09 19:25:33 +00:00
2026-02-03 16:35:12 +00:00
2026-01-25 21:08:44 +00:00
2026-01-24 22:42:23 +00:00
2026-01-23 21:42:27 +00:00
2025-12-02 00:51:44 +00:00
2026-01-09 16:51:08 +00:00
2026-01-01 22:29:15 +00:00
2026-02-02 18:59:44 +00:00
2026-02-02 14:53:52 +00:00
2026-01-30 19:02:14 +00:00
2026-01-22 16:42:39 +00:00
2026-01-22 16:42:39 +00:00
2025-12-01 23:50:10 +00:00
2026-01-22 16:42:39 +00:00
2026-02-01 23:26:32 +00:00
2025-12-01 14:46:00 +00:00
2026-01-22 16:42:39 +00:00
2026-01-22 16:42:39 +00:00
2026-01-20 15:52:39 +00:00
2026-01-25 21:08:44 +00:00
2025-12-02 17:21:48 +00:00
2026-01-22 16:42:39 +00:00
2025-12-01 14:09:35 +00:00
2026-01-25 21:08:44 +00:00
2026-01-20 15:52:39 +00:00
2026-01-21 12:02:46 +00:00
2026-01-22 16:42:39 +00:00
2026-01-20 15:52:39 +00:00
2026-01-22 16:42:39 +00:00
2026-01-22 16:42:39 +00:00
2026-02-03 18:40:31 +00:00
2026-01-25 21:08:44 +00:00
2026-01-22 16:42:39 +00:00
2026-01-24 22:42:23 +00:00
2026-01-03 11:14:17 +00:00
2025-12-12 11:05:24 +00:00
2025-12-01 23:24:06 +00:00
2025-12-23 18:52:13 +00:00
2026-01-25 21:08:44 +00:00
2026-01-22 16:42:39 +00:00
2026-01-24 22:42:23 +00:00
2026-02-02 14:53:52 +00:00
2026-02-03 14:59:27 +00:00
2026-01-22 00:30:15 +00:00
2026-01-25 21:08:44 +00:00
2026-02-02 22:02:22 +00:00
2026-02-02 22:02:22 +00:00
2025-11-29 17:06:18 +00:00
2026-01-22 13:39:06 +00:00
2026-01-25 21:08:44 +00:00
2026-01-22 13:39:06 +00:00
2025-12-02 03:16:52 +00:00
2026-02-02 22:01:46 +00:00
2025-11-06 13:54:26 +00:00
2026-01-25 21:08:44 +00:00
2026-01-22 13:39:06 +00:00
2026-01-25 21:08:44 +00:00
2026-02-02 23:01:29 +00:00
2026-01-22 16:42:39 +00:00
2026-02-03 19:00:56 +00:00
2026-01-22 13:39:06 +00:00
2025-11-30 02:48:05 +00:00
2025-10-21 12:37:39 +00:00
2026-01-24 22:42:23 +00:00
2026-01-25 21:08:44 +00:00
2026-02-02 22:02:22 +00:00
2026-01-22 13:39:06 +00:00
2026-02-01 16:27:10 +00:00
2026-01-22 16:42:39 +00:00
2026-02-02 18:59:44 +00:00
2026-01-30 19:01:58 +00:00
2026-02-02 22:02:22 +00:00
2025-12-12 11:05:24 +00:00
2026-01-22 16:42:39 +00:00
2026-01-19 19:26:18 +00:00
2025-12-10 00:29:07 +00:00
2026-01-22 22:33:33 +00:00
2026-01-23 21:42:27 +00:00
2026-02-02 22:02:11 +00:00
2026-01-24 22:42:23 +00:00
2026-02-03 16:24:28 +00:00
2025-12-01 23:52:21 +00:00
2025-11-27 08:34:31 +00:00
2026-02-02 23:17:40 +00:00
2026-02-02 22:02:22 +00:00
2026-01-19 19:20:00 +00:00
2026-01-25 21:08:44 +00:00
2026-01-25 21:08:44 +00:00
2026-02-02 22:02:22 +00:00
2025-12-02 16:47:13 +00:00
2026-01-22 16:42:39 +00:00
2026-01-22 13:39:06 +00:00
2026-01-25 21:08:44 +00:00
2026-02-02 22:02:11 +00:00
2026-01-22 00:44:12 +00:00
2026-01-24 22:42:23 +00:00
2026-01-09 19:25:33 +00:00
2026-02-02 18:59:44 +00:00
2025-12-02 01:00:06 +00:00
2025-12-20 10:45:46 +00:00
2026-02-02 18:59:44 +00:00
2026-01-19 19:26:18 +00:00
2026-01-24 22:42:23 +00:00
2026-01-21 12:02:46 +00:00
2026-01-21 12:02:46 +00:00
2026-01-22 00:44:12 +00:00
2026-01-22 00:44:12 +00:00
2026-02-02 18:59:44 +00:00
2026-02-02 23:01:29 +00:00
2026-01-09 19:16:34 +00:00
2026-01-24 22:42:23 +00:00
2026-01-09 16:51:08 +00:00
2026-01-22 00:30:15 +00:00
2026-01-03 11:14:17 +00:00
2025-12-12 11:05:24 +00:00
2026-02-03 17:48:44 +00:00
2026-02-03 18:51:27 +00:00
2026-02-02 23:01:29 +00:00
2026-01-24 22:42:23 +00:00
2026-01-24 22:42:23 +00:00
2025-12-01 21:33:45 +00:00
2026-02-02 22:02:11 +00:00
2025-11-24 15:16:14 +00:00
2026-02-01 23:26:32 +00:00
2026-02-02 22:02:22 +00:00
2026-02-02 18:59:44 +00:00
2026-02-02 22:02:22 +00:00
2026-01-24 22:42:23 +00:00
2026-02-01 23:26:32 +00:00
2026-02-02 22:02:22 +00:00
2026-02-02 18:59:44 +00:00
2026-02-02 18:59:44 +00:00
2026-01-24 22:42:23 +00:00
2026-02-03 18:49:42 +00:00
2026-02-02 22:02:22 +00:00
2026-02-02 18:59:44 +00:00
2026-02-03 19:55:29 +00:00
2026-02-02 18:59:44 +00:00
2026-02-02 22:02:11 +00:00
2026-02-02 18:59:44 +00:00
2026-02-03 18:17:31 +00:00
2026-02-02 22:02:11 +00:00
2026-01-19 19:26:18 +00:00
2026-01-12 15:19:59 +00:00
2026-02-02 22:02:11 +00:00
2026-02-02 18:59:44 +00:00
2026-01-01 22:29:15 +00:00
2025-11-27 10:12:48 +00:00
2026-02-02 18:59:44 +00:00
2026-01-22 00:44:12 +00:00
2026-01-22 00:44:12 +00:00
2026-01-09 16:51:08 +00:00
2026-02-02 18:59:44 +00:00
2025-12-02 00:19:20 +00:00
2026-01-22 00:44:12 +00:00
2026-02-03 18:39:15 +00:00
2026-01-10 12:55:02 +00:00
2026-01-10 12:55:02 +00:00
2026-02-03 17:16:27 +00:00
2026-01-24 22:42:23 +00:00
2026-01-12 15:19:59 +00:00
2026-01-24 22:42:23 +00:00
2026-01-22 16:42:39 +00:00
2026-01-24 22:42:23 +00:00
2026-01-22 16:42:39 +00:00
2025-12-01 01:05:07 +00:00
2025-11-29 21:47:22 +00:00
2026-01-22 13:39:06 +00:00
2025-12-09 09:29:27 +00:00
2026-01-01 22:29:15 +00:00
2026-02-02 22:01:36 +00:00
2026-01-24 22:42:23 +00:00
2026-02-03 16:35:12 +00:00
2026-02-02 18:59:44 +00:00
2026-01-01 22:29:15 +00:00
2026-02-03 16:58:13 +00:00
2026-02-03 17:16:27 +00:00
2026-01-24 22:42:23 +00:00