mirror of https://github.com/AstrBotDevs/AstrBot synced 2026-07-16 01:40:15 +08:00

Files

Weilong Liao 7ddf6371b9 fix(webui): enforce 12-char dashboard password policy with backend+frontend validation (#7338 )

* fix(webui): enforce 12-char dashboard password policy with backend+frontend validation

* fix(i18n): update password policy hints and validation rules for improved security

* test: adapt dashboard auth fixtures for hashed default password

* fix(security): increase PBKDF2 iterations

* feat(auth): implement secure login challenge and proof verification

* chore: ruff format

* fix(auth): update md5 import syntax for consistency

* feat(dashboard): implement random password generation for empty dashboard password

* feat(auth): enforce plaintext password requirement for legacy MD5 hashes

* fix(i18n): update password hint texts to reflect auto-generated initial passwords

* feat(dashboard): implement password change requirement and reset logic

* feat(auth): implement account setup flow and password change requirements

* feat: Implement legacy password support and upgrade mechanism

- Added `hash_legacy_dashboard_password` function for MD5 hashing of passwords.
- Updated configuration handling to store both PBKDF2 and legacy password hashes.
- Introduced logic to check if password storage has been upgraded and if a password change is required.
- Modified dashboard authentication routes to handle legacy password checks and prompts for upgrades.
- Updated frontend to display warnings for legacy password storage and required upgrades.
- Enhanced tests to cover scenarios for legacy password handling and migration to new storage format.

* fix(logo): update text color styles to use CSS variables for consistency

* feat(dashboard): upgrade password storage and enforce change requirement

* fix(dashboard): update minimum password length from 12 to 10 characters

* fix(dashboard): update minimum password length from 10 to 8 characters

---------

Co-authored-by: RC-CHN <1051989940@qq.com>

2026-05-12 23:46:57 +08:00

public

Revert "可选后端，实现前后端分离" (#5536 )

2026-02-27 22:02:37 +08:00

scripts

feat: enable shiki highlighting for t2i templates and add a template (#7501 )

2026-04-14 16:46:32 +08:00

src

fix(webui): enforce 12-char dashboard password policy with backend+frontend validation (#7338 )

2026-05-12 23:46:57 +08:00

tests

feat: re-implement plugin pinning functionality for extensions (#7918 )

2026-04-30 22:17:52 +08:00

.gitignore

…

env.d.ts

Revert "可选后端，实现前后端分离" (#5536 )

2026-02-27 22:02:37 +08:00

index.html

perf: improve provider config ui (#7772 )

2026-04-24 20:46:45 +08:00

LICENSE

…

package.json

fix(webui): enforce 12-char dashboard password policy with backend+frontend validation (#7338 )

2026-05-12 23:46:57 +08:00

pnpm-lock.yaml

fix(webui): enforce 12-char dashboard password policy with backend+frontend validation (#7338 )

2026-05-12 23:46:57 +08:00

README.md

feat(dashboard): make release redirect base URL configurable (#5330 )

2026-02-22 20:23:32 +09:00

tsconfig.json

Revert "可选后端，实现前后端分离" (#5536 )

2026-02-27 22:02:37 +08:00

tsconfig.vite-config.json

Revert "可选后端，实现前后端分离" (#5536 )

2026-02-27 22:02:37 +08:00

vite.config.ts

chore: bump version to 4.24.1

2026-05-03 23:00:16 +08:00

README.md

AstrBot 管理面板

基于 CodedThemes/Berry 模板开发。

环境变量

VITE_ASTRBOT_RELEASE_BASE_URL（可选）
- 默认值：https://github.com/AstrBotDevs/AstrBot/releases
- 用途：管理面板内“更新到最新版本”外部跳转所使用的 release 基地址。集成方可按需覆盖（例如 Desktop 指向其自身发布页）。
- 建议传入仓库的 .../releases 基地址（不带 /latest）。