960cee4be4
All checks were successful
Deploy bericht / deploy (push) Successful in 14s
- _inc.php: api_authenticate() nutzt awlauth_require(bericht,read) inkl. same-origin-CSRF; CORS (Access-Control-Allow-Origin:*) entfernt (mit Cookies unzulaessig + bei same-origin ueberfluessig). - auth.php: Login ueber awlauth_login/issue -> HttpOnly-Cookie awl_sso, kein Token mehr im Body. - photo.php/pdf.php: GET-Binaer ueber awlauth_verify (kein CSRF, da auch per window.location/<object> geladen); Bearer/jwt-Query-Auth entfernt. - shipments.php: unveraendert (nutzt api_authenticate -> awlauth_require). - neu: logout.php (Single-Logout), verify.php (sliding session). - _jwt.php geloescht (JWT vollstaendig abgeloest). [deploy] |
||
|---|---|---|
| .. | ||
| _inc.php | ||
| auth.php | ||
| customers.php | ||
| delete_photo.php | ||
| logout.php | ||
| materials.php | ||
| odt_templates.php | ||
| orders.php | ||
| pages.php | ||
| pdf.php | ||
| photo.php | ||
| reports.php | ||
| shipments.php | ||
| templates.php | ||
| transcribe.php | ||
| verify.php | ||
| voice.php | ||