Miguel Ribeiro
b75f13d0ff
fix: harden oidc state validation and session rotation ( #1071 )
...
fix: account takeover via email-based account linking
fix: missing fields when cloning a subscription
fix: ssrf via oidc token/userInfo url configuration
fix: ssrf via test email notification
fix: zip slip path traversal in database restore writes files to webroot
2026-06-23 00:17:18 +08:00
AmarBego
57a02c610b
Harden OIDC state validation and session rotation ( #1071 )
2026-06-22 21:54:20 +08:00
Miguel Ribeiro
51f9c1ea68
validate oidc state parameter to prevent csrf login attack
...
fix: secure unauthenticated db restore endpoint with a setup token
fix: restrict migrate.php to CLI and admin session
2026-06-06 22:56:46 +02:00
Miguel Ribeiro
4fd87c3014
fix: session expiration on pwa on android ( #1023 )
...
fix: image search failing to save
2026-03-21 18:05:59 +00:00
Miguel Ribeiro
c0d53e4423
feat: add oauth/oidc support ( #873 )
2025-07-21 22:53:35 +02:00
Miguel Ribeiro
c2e85d6e10
feat: support automatic dark mode
...
refactor: run linter and cleanup php files
fix: not every payment cycle was shown on the calendar
feat: also show previous payments on the calendar for the current month
2024-06-26 18:11:37 +02:00
Miguel Ribeiro
092be22183
feat: add hability to disable login ( #378 )
2024-06-08 00:04:50 +02:00
Miguel Ribeiro
e1006e5823
feat!: allow registration of multiple users ( #340 )
...
feat: administration area
feat: add reset password functionality
2024-05-26 23:30:51 +02:00
Miguel Ribeiro
b622434ca0
feat: add monthly budget field and statistics ( #329 )
2024-05-17 23:14:17 +02:00
Miguel Ribeiro
7b509d2b3d
feat: backup and restore ( #288 )
2024-04-26 17:41:19 +02:00
ellite
90ac147e2c
Attempt to fix pre selection of main currency
2023-11-11 22:49:51 +01:00
ellite
65786aa191
Fix session expiring when it should be stored
2023-10-08 15:59:27 +02:00
ellite
63ce5b099a
Wallos v0.9
2023-10-05 22:39:37 +02:00
