saopig1andClaude Opus 4.7 a73f797bcb feat(auth): two-role permission system (admin/member) ...

Adds an admin/member role to WebUI auth. /api/users and /api/audit
are now gated by a requireAdmin middleware; all other authenticated
endpoints accept both roles. Schema migration defaults all existing
users to admin to preserve access. POST /api/users defaults new users
to member; first-run setup always creates an admin. Adds PATCH
/api/users/:id/role with last-admin demotion and deletion guards.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

2026-05-27 15:35:15 +08:00

..

csrf.test.ts

feat(auth): add csrfOriginCheck middleware

2026-05-27 13:38:35 +08:00

csrf.ts

feat(auth): add csrfOriginCheck middleware

2026-05-27 13:38:35 +08:00

requireAdmin.test.ts

feat(auth): two-role permission system (admin/member)

2026-05-27 15:35:15 +08:00

requireAdmin.ts

feat(auth): two-role permission system (admin/member)

2026-05-27 15:35:15 +08:00

requireAuth.test.ts

feat(auth): two-role permission system (admin/member)

2026-05-27 15:35:15 +08:00

requireAuth.ts

feat(auth): two-role permission system (admin/member)

2026-05-27 15:35:15 +08:00