3 people 706e87af9f fix(admin): stop silent superuser creation on auth probe and harden bootstrap (#18702) ...

Fix CWE-798/306 admin security: check_admin() silently created default admin accounts on any anonymous request. Now no longer creates accounts. Bootstrap uses env/random password. Login throttling added. Admin port bound to localhost. 

---------

Co-authored-by: jindou <jindou@local>
Co-authored-by: maoyifeng <myfbee5@163.com>

2026-08-28 17:44:52 +08:00

..

conftest.py

fix(admin,api): honor STORAGE_IMPL when surfacing file_store backend (closes #17294) (#17441)

2026-07-29 11:13:20 +08:00

test_auth_hardening.py

fix(admin): stop silent superuser creation on auth probe and harden bootstrap (#18702)

2026-08-28 17:44:52 +08:00

test_get_all_services.py

fix(admin,api): honor STORAGE_IMPL when surfacing file_store backend (closes #17294) (#17441)

2026-07-29 11:13:20 +08:00

test_load_configurations.py

fix(admin,api): honor STORAGE_IMPL when surfacing file_store backend (closes #17294) (#17441)

2026-07-29 11:13:20 +08:00