syncthing/next-gen-gui/src
Jakob Borg 439c6c5b7c
lib/api: Add cache busting for basic auth (ref #9208) (#9215)
This adds our short device ID to the basic auth realm. This has at least
two consequences:

- It is different from what's presented by another device on the same
address (e.g., if I use SSH forwards to different dives on the same
local address), preventing credentials for one from being sent to
another.

- It is different from what we did previously, meaning we avoid cached
credentials from old versions interfering with the new login flow.

I don't *think* there should be things that depend on our precise realm
string, so this shouldn't break any existing setups...

Sneakily this also changes the session cookie and CSRF name, because I
think `id.Short().String()` is nicer than `id.String()[:5]` and the
short ID is two characters longer. That's also not a problem...
2023-11-14 11:57:39 +01:00
..
app lib/api: Add cache busting for basic auth (ref #9208) (#9215) 2023-11-14 11:57:39 +01:00
assets build: Add build process for newgui (#7351) 2021-02-15 14:52:28 +01:00
environments build: Add build process for newgui (#7351) 2021-02-15 14:52:28 +01:00
favicon.ico build: Add build process for newgui (#7351) 2021-02-15 14:52:28 +01:00
index.html build: Add build process for newgui (#7351) 2021-02-15 14:52:28 +01:00
main.ts build: Add build process for newgui (#7351) 2021-02-15 14:52:28 +01:00
polyfills.ts build: Add build process for newgui (#7351) 2021-02-15 14:52:28 +01:00
styles.scss build: Add build process for newgui (#7351) 2021-02-15 14:52:28 +01:00
test.ts build: Add build process for newgui (#7351) 2021-02-15 14:52:28 +01:00