Commit graph

8 commits

Author SHA1 Message Date
Johannes Rauh
3e96d71445 wip: hookable config form 2026-04-30 10:59:24 +02:00
Johannes Rauh
8b866a74fc Make ctime column not nullable 2026-04-30 10:59:24 +02:00
Johannes Rauh
73ef66dbd0 Prevent bypassing 2fa by changing username case
When using postgres db as authentication backend it was possible
to bypass 2fa by using e.g. `ADMIN` instead of `admin` as username.

This is now prevented by:
1. Ensuring there is only one secret per user no matter the case
2. Lowering all usernames for filtering in the database
2026-04-30 10:59:24 +02:00
Johannes Rauh
599cc2349a Use more appropriate names 2026-04-30 10:59:24 +02:00
Johannes Rauh
3511471c43 Add icingaweb_totp to pgsql schema 2026-04-30 10:59:24 +02:00
Eric Lippmann
662de28f85 License source files as GPL-3.0-or-later
Add SPDX license headers and mark source files as GPL-3.0-or-later to
preserve the option to relicense under later GPL versions.
2026-03-26 17:49:26 +01:00
Yonas Habteab
21bde13274 Introduce database models required by migration hooks 2023-09-19 14:37:54 +02:00
Eric Lippmann
d41ebeb6bc Schema path is now always /usr/share/icingaweb2/schema 2023-01-09 16:14:15 +01:00
Renamed from etc/schema/pgsql.schema.sql (Browse further)