stream-fusion-better/deploy
LimeDrive 7755a78842 feat(security): add Fernet encryption for config tokens and CSRF protection
- Implement Fernet encryption for configuration URLs to protect sensitive user settings
- Add CONFIG_SECRET_KEY environment variable for key derivation
- Add server-side /api/config/encode endpoint for secure config token generation
- Add CSRF token generation and validation for all admin POST routes
- Auto-inject CSRF tokens into admin forms and AJAX requests via JavaScript
- Update frontend to use async server encoding instead of client-side Base64
- Add localStorage fallback for config restoration on /configure pages
- Maintain backward compatibility with existing Base64-encoded URLs
- Log warning at startup if CONFIG_SECRET_KEY is not configured
- Convert debug logs to trace level in TorrentSmartContainer for reduced noise
2026-03-30 01:18:08 +02:00
..
catalogs-compose.yml Docs(deploy): Add Catalogs, Trakt and Manager plugins 2024-09-29 16:03:58 +00:00
catalogs.env Docs(deploy): Add Catalogs, Trakt and Manager plugins 2024-09-29 16:03:58 +00:00
dev-compose.yml fix: update .gitignore and dev-compose.yml for environment configuration; add StremThru response handling methods 2026-03-24 15:54:46 +01:00
docker-compose.yml chore: bump version to 3.0.0, update workflows for GHCR and disable docs deploy 2026-03-18 22:33:35 +01:00
example.env feat(security): add Fernet encryption for config tokens and CSRF protection 2026-03-30 01:18:08 +02:00
manager-compose.yml Docs(deploy): Add Catalogs, Trakt and Manager plugins 2024-09-29 16:03:58 +00:00
trakt-compose.yml Docs(deploy): Add Catalogs, Trakt and Manager plugins 2024-09-29 16:03:58 +00:00
trakt.env Docs(deploy): Add Catalogs, Trakt and Manager plugins 2024-09-29 16:03:58 +00:00