cynfo3000 ec30be7246 security: API-Key Permissions + Customer-Scoping ...

- DB Migration: api_keys bekommt 'permissions' + 'customer_id' Spalten
- Permissions: agent | read | write | admin
  - agent:  nur /api/v1/agent/ws + /api/v1/agent/heartbeat
  - read:   GET-Endpoints (optional customer-scoped)
  - write:  alles ausser Terminal
  - admin:  voll (Terminal bleibt JWT-only)
- Bestehende Keys werden auf 'admin' migriert (Abwaertskompatibilitaet)
- Frontend: API-Key Verwaltung zeigt Permissions-Badge + Kunden-Scope
- API-Client: createAPIKey nimmt jetzt permissions + customer_id

2026-03-09 23:52:26 +01:00

..

apikeys.go

security: API-Key Permissions + Customer-Scoping

2026-03-09 23:52:26 +01:00

audit.go

Feature: Audit-Log - tracks all user actions with timestamps

2026-03-04 23:45:01 +01:00

auth.go

feat: TOTP 2FA + diverse Verbesserungen

2026-03-08 19:17:43 +01:00

backup.go

Feature: Audit-Log - tracks all user actions with timestamps

2026-03-04 23:45:01 +01:00

customers.go

Feature: Audit-Log - tracks all user actions with timestamps

2026-03-04 23:45:01 +01:00

firmware.go

fix: Backend platform-aware Agent-Update (nicht mehr hardcoded freebsd)

2026-03-09 20:31:26 +01:00

handlers.go

fix: Linux-Agent Update — platform im Heartbeat mitschicken, Backend nutzt plattformspezifische Firmware statt hardcoded freebsd

2026-03-06 23:41:22 +01:00

installer.go

Installer-Paket System: Backend speichert/served ZIP, Frontend Upload+Download, install.sh auto-download von Backend statt Git

2026-03-03 23:37:31 +01:00

metrics.go

feat: Interface-Durchsatz-Chart — Backend berechnet RX/TX-Rate (bps), Frontend zeigt Dual-Sparkline per Klick auf Interface

2026-03-06 22:00:33 +01:00

middleware.go

security: API-Key Permissions + Customer-Scoping

2026-03-09 23:52:26 +01:00

scheduler.go

feat: TOTP 2FA + diverse Verbesserungen

2026-03-08 19:17:43 +01:00

settings.go

Feature: System settings in DB - configurable backend URLs and API key

2026-03-04 23:57:14 +01:00

tasks.go

feat: TOTP 2FA + diverse Verbesserungen

2026-03-08 19:17:43 +01:00

terminal.go

security: Terminal-Endpoint JWT-only (kein API-Key Zugriff)

2026-03-09 23:44:12 +01:00

tunnel_proxy.go

security: Terminal-Endpoint JWT-only (kein API-Key Zugriff)

2026-03-09 23:44:12 +01:00

users.go

Feature: Audit-Log - tracks all user actions with timestamps

2026-03-04 23:45:01 +01:00

wireguard.go

Feature: Audit-Log - tracks all user actions with timestamps

2026-03-04 23:45:01 +01:00