3x-ui/web
farhadh 56ce6073ce
feat(auth): block panel with default admin/admin credentials and guide credential change
checkLogin middleware now detects default admin/admin credentials and
redirects every panel route to /panel/settings until they are changed.
The settings page auto-opens the Authentication tab, shows a
non-dismissible error banner, and lists 'Default credentials' first in
the security checklist. Login response includes mustChangeCredentials
so the login page can redirect directly. Logout is now POST-only.
Password must be at least 10 characters and cannot be admin/admin.
2026-05-11 21:16:22 +02:00
..
controller feat(auth): block panel with default admin/admin credentials and guide credential change 2026-05-11 21:16:22 +02:00
entity v3 2026-05-10 02:13:42 +02:00
global Refactor code and fix linter warnings (#3627) 2026-01-05 05:54:56 +01:00
job feat(nodes): traffic-writer queue, full-mirror sync, WS event fixes 2026-05-10 16:25:23 +02:00
locale v3 2026-05-10 02:13:42 +02:00
middleware v3 2026-05-10 02:13:42 +02:00
network docs: add comments for all functions 2025-09-20 09:35:50 +02:00
runtime feat(nodes): traffic-writer queue, full-mirror sync, WS event fixes 2026-05-10 16:25:23 +02:00
service feat(auth): block panel with default admin/admin credentials and guide credential change 2026-05-11 21:16:22 +02:00
session refactor(session): store user ID in session instead of full struct 2026-05-11 21:16:22 +02:00
translation update translation 2026-05-11 20:47:49 +02:00
websocket feat(nodes): traffic-writer queue, full-mirror sync, WS event fixes 2026-05-10 16:25:23 +02:00
web.go fix(xray): implement graceful shutdown for xray process and add tests (#4259) 2026-05-11 14:11:40 +02:00