4 Commits

Author	SHA1	Message	Date
henrygd	ba10da1b9f	hub: add additional validation checks for custom api routes ... - Validate the user is assigned to system in authenticated routes where the user passes in system ID. This protects against a somewhat impractical scenario where an authenticated user cracks a random 15 character alphanumeric ID of a system that doesn't belong to them via web API. - Validate that systemd service exists in database before requesting service details from agent. This protects against authenticated users getting unit properties of services that aren't explicitly monitored. - Refactor responses in authenticated routes to prevent enumeration of other users' random 15 char system IDs.	2026-04-01 16:30:45 -04:00
henrygd	5463a38f0f	refactor(hub): move api user role checks to middlewares	2026-03-30 19:35:02 -04:00
henrygd	8e71c8ad97	hub: don't retry update check within cache time if request fails	2026-03-22 18:18:31 -04:00
henrygd	0b0b5d16d7	refactor(hub): move api related code from hub.go to api.go	2026-03-22 17:31:06 -04:00