Torsten Schulz (local) 678a14c004 Enhance WebAuthn origin handling and debug logging for passkey registration ...

Refine the WebAuthn configuration to ensure that HTTPS origins do not include ports, improving compliance with standards. Add additional debug logging in the passkey registration process to verify the webauthnOrigin and provide guidance for configuration issues, aiding in troubleshooting and enhancing the clarity of the registration flow.

2026-01-07 22:01:28 +01:00

..

api

Enhance WebAuthn origin handling and debug logging for passkey registration

2026-01-07 22:01:28 +01:00

middleware

Update Apache SSL configuration and enhance security features across multiple files. Changed X-Frame-Options to SAMEORIGIN for better security, added optional Content Security Policy headers for testing, and improved password handling with HaveIBeenPwned checks during user registration and password reset. Implemented passkey login functionality in the authentication flow, including UI updates for user experience. Enhanced image upload processing with size limits and validation, and added rate limiting for various API endpoints to prevent abuse.

2026-01-05 11:50:57 +01:00

templates

membership: refactor form filling, add smoke tests and debug-guard fallback; fix mappings

2025-10-23 14:21:05 +02:00

utils

Enhance WebAuthn origin handling and debug logging for passkey registration

2026-01-07 22:01:28 +01:00