Matthieu B 498886c06a fix(ldap): address security, correctness, and code quality issues ...

Security:
- Fix XSS in HTMX responses by replacing f-string HTML with Jinja partials
- Fix TLS verify_cert not being applied (add Tls config to ldap3 Server)
- Fix password_hash NOT NULL conflict for LDAP-only admin accounts
- Fix should_create_ldap_user defaulting to True for existing invitations

Correctness:
- Fix DN reconstruction fragility using escape_rdn for special characters
- Fix connection leaks with try/finally in all LDAPClient methods
- Fix sync interval logic (check FLASK_ENV not WIZARR_ENABLE_SCHEDULER)
- Only register LDAP sync job when LDAP is actually configured
- Make find_user_dn and service_connection public API methods

Cleanup:
- Squash 5 incremental LDAP migrations into single 20251226_add_ldap_support
- Remove duplicate imports/queries in auth routes
- Replace f-string logging with %s formatting
- Extract inline HTML to Jinja template partials

2026-03-29 15:58:09 +02:00

..

activity.py

feat: Enhance logging configuration with context variable support and improved console rendering

2025-10-19 16:38:24 +02:00

ldap_sync.py

fix(ldap): address security, correctness, and code quality issues

2026-03-29 15:58:09 +02:00

maintenance.py

refactor: streamline conditional checks and improve logging clarity

2025-10-23 18:44:30 +02:00

update_check.py

feat: Discord notifications now use rich embeds with Wizarr branding

2025-10-21 15:30:41 +01:00