mirror of
https://github.com/photoprism/photoprism.git
synced 2026-07-22 17:49:02 +00:00
c45ee6e54f
- Add scoped session revocation (RevokeSessions / RevokeDerivedSessions) shared by the user-update API and the CLI: a privilege-level change now revokes logins and app-password-derived sessions while keeping the app passwords themselves, so configured devices keep working. - Identify app-password-derived sessions by auth_method "session". - Deny app passwords on the REST API when the account cannot log in (DenyLogIn); WebDAV access stays governed by CanUseWebDAV. - Reduce the WebDAV auth cache expiration to one minute. - Add IsSystemOrInvalid; allow deleting the initial admin account and skip re-initializing a deactivated or deleted admin in InitAccount. - Move session-revocation scopes to pkg/authn and extend tests. |
||
|---|---|---|
| .. | ||
| authn.go | ||
| client.go | ||
| const.go | ||
| errors.go | ||
| grants.go | ||
| grants_test.go | ||
| issuer.go | ||
| issuer_test.go | ||
| keys.go | ||
| keys_test.go | ||
| methods.go | ||
| methods_test.go | ||
| oidc.go | ||
| providers.go | ||
| providers_test.go | ||
| revoke.go | ||
| username.go | ||
| username_test.go | ||