Replace Node UI token bootstrap with dashboard sessions#1428

Open

Jurij89 wants to merge 93 commits into

mainfrom

codex/node-ui-auth-bootstrap-session

Commits on Jul 3, 2026

fix(node-ui): replace token bootstrap with dashboard sessions
Jurij Skornik
committed
test(node-ui): stabilize dashboard session auth tests
Jurij Skornik
committed
fix(node-ui): address dashboard session review
Jurij Skornik
committed
fix(node-ui): refresh stale dashboard sessions
Jurij Skornik
committed
Address node UI auth review follow-ups
Jurij Skornik
committed
Address dashboard session review follow-ups
Jurij Skornik
committed
Address review round 4 dashboard session feedback
Jurij Skornik
committed
Address review round 5 and CI failure
Jurij Skornik
committed

Commits on Jul 4, 2026

Address node-ui session review and e2e failures
Jurij Skornik
committed
Address delayed PR review comments
Jurij Skornik
committed
Address dashboard session review feedback
Jurij Skornik
committed
Tighten dashboard logout session safety
Jurij Skornik
committed
Fix auth-session logout CSRF e2e
Jurij Skornik
committed
Avoid SSE near-expiry reconnect loop
Jurij Skornik
committed
Tighten dashboard auth policy coverage
Jurij Skornik
committed
Cover dashboard CSRF session endpoint
Jurij Skornik
committed
Honor Forwarded proto for dashboard cookies
Jurij Skornik
committed
Cover SSE session expiry closure
Jurij Skornik
committed
Handle explicit empty auth and stale CSRF
Jurij Skornik
committed
Cover CSRF on unsafe dashboard methods
Jurij Skornik
committed
Narrow stale CSRF retry handling
Jurij Skornik
committed
Trust forwarded proto only from loopback
Jurij Skornik
committed
Cover incorrect CSRF token rejection
Jurij Skornik
committed
Resolve dashboard principals at auth time
Jurij Skornik
committed
Cover UI asset and SSE review gaps
Jurij Skornik
committed
Cover explicit SSE and referer auth gaps
Jurij Skornik
committed
Require token for loopback dashboard sessions
Jurij Skornik
committed
Cover dashboard cors and smoke auth gaps
Jurij Skornik
committed
Authenticate raw mock fallback e2e spec
Jurij Skornik
committed
Handle dashboard origin metadata and gate ownership
Jurij Skornik
committed
Block cross-site dashboard session exchange
Jurij Skornik
committed
Guard dashboard session refresh races
Jurij Skornik
committed
Support cross-origin dashboard session review gaps
Jurij Skornik
committed
Close stale dashboard SSE and code CSRF retries
Jurij Skornik
committed
Cover dashboard exchange and unlock failures
Jurij Skornik
committed
Make daemon fetch path contract explicit
Jurij Skornik
committed
Update node-ui compatibility assertion for daemon paths
Jurij Skornik
committed
Share auth CORS header policy
Jurij Skornik
committed
Cover dashboard status and connect session paths
Jurij Skornik
committed
Allow blob-backed UI previews in CSP
Jurij Skornik
committed
Allow UI font origins in CSP
Jurij Skornik
committed
Add credentialed CORS to node-ui API responses
Jurij Skornik
committed
Handle proxied HTTPS dashboard origins
Jurij Skornik
committed
Keep node-ui daemon paths typed
Jurij Skornik
committed
Add dashboard username password login
Jurij Skornik
committed
Create dashboard credentials in setup flows
Jurij Skornik
committed
Harden dashboard credential setup review gaps
Jurij Skornik
committed
Address dashboard login review gaps
Jurij Skornik
committed
Address dashboard login follow-up review
Jurij Skornik
committed
Require fingerprints for login sessions
Jurij Skornik
committed

Commits on Jul 5, 2026

Tighten dashboard login review gaps
Jurij Skornik
committed
Bound dashboard login attempts
Jurij Skornik
committed
Cover dashboard login CSRF contract
Jurij Skornik
committed
Assert password-login cookie attributes
Jurij Skornik
committed
Harden dashboard login review gaps
Jurij Skornik
committed
Revalidate dashboard login event streams
Jurij Skornik
committed
Cover dashboard login setup review gaps
Jurij Skornik
committed
Harden dashboard credential verification
Jurij Skornik
committed
Merge pull request #1439 from OriginTrail/codex/node-ui-dashboard-login
Jurij89
authored
Refine dashboard login follow-up boundaries
Jurij Skornik
committed
Address dashboard follow-up review gaps
Jurij Skornik
committed
Collapse dashboard SSE auth metadata
Jurij Skornik
committed
Revalidate dashboard SSE sessions
Jurij Skornik
committed
Cover resolved dashboard SSE comments
Jurij Skornik
committed
Preserve dashboard auth compatibility
Jurij Skornik
committed
Keep fingerprints out of request auth
Jurij Skornik
committed
Reuse dashboard credential result types
Jurij Skornik
committed
Cover MCP credential setup wiring
Jurij Skornik
committed
Merge pull request #1451 from OriginTrail/codex/dashboard-login-followups
Jurij89
authored
Harden dashboard auth follow-up coverage
Jurij Skornik
committed
Address dashboard auth follow-up review
Jurij Skornik
committed
Tighten dashboard login limiter API
Jurij Skornik
committed
Split dashboard auth and static UI modules
Jurij Skornik
committed
Centralize dashboard principal and limiter state
Jurij Skornik
committed
Merge pull request #1460 from OriginTrail/codex/dashboard-auth-boundary-smoke
Jurij89
authored
Close dashboard auth boundary follow-up
Jurij Skornik
committed
Address dashboard auth review comments
Jurij Skornik
committed
Collapse dashboard auth context handoff
Jurij Skornik
committed
Tighten dashboard auth review coverage
Jurij Skornik
committed

Commits on Jul 6, 2026

Preserve plugin and sign-join contracts
Jurij Skornik
committed
Enforce login session fingerprint at runtime
Jurij Skornik
committed
Merge pull request #1465 from OriginTrail/codex/dashboard-auth-1433-closeout
Jurij89
authored
Tighten daemon route auth identity handoff
Jurij Skornik
committed
Clarify route auth context handoff
Jurij Skornik
committed
Keep route dispatch identity boundary strict
Jurij Skornik
committed
Pin public plugin context surface
Jurij Skornik
committed
Cover plugin and route identity review gaps
Jurij Skornik
committed
Use checked plugin type fixture
Jurij Skornik
committed
Clarify auth resolver and plugin boundaries
Jurij Skornik
committed
Tighten plugin boundary review followups
Jurij Skornik
committed
Anchor plugin context compatibility keys
Jurij Skornik
committed
Assert plugin context compatibility key diffs
Jurij Skornik
committed
Merge pull request #1471 from OriginTrail/codex/dashboard-auth-route-identity-followup
Jurij89
authored