Tobias Gesellchen 9090fad563 feat(admin): add tri-state AdminAreaAuth setting with default-creds guard rail ...

First piece of the #419 admin-area gate: a persisted, live-reloadable
tri-state setting ("" unset / "enabled" / "disabled") so a later release
can flip the default from open to gated without breaking an explicit
opt-out. Rejects enabling while MGMT_USERNAME/MGMT_PASSWORD are still the
published default, since that would give a false sense of security.

No behavior change yet — nothing reads this field to actually gate
anything. That's the next chunk.

Refs #419

2026-08-08 23:49:57 +02:00

..

amazon

sec8: refactor zeroconf API to (host, port string) to close request-forgery alerts

2026-05-25 13:14:56 +02:00

bmx

fix(web): play Radio Browser via native RADIO_BROWSER source (refs #479)

2026-06-08 20:44:31 +02:00

certmanager

sec4: fix unhandled writable file close; ignore CODE-SCANNING-NOTES.md

2026-05-24 15:52:35 +02:00

constants

refactor(speaker): introduce pkg/speaker leaf for shared protocol constants

2026-05-11 23:18:08 +02:00

datastore

feat(admin): add tri-state AdminAreaAuth setting with default-creds guard rail

2026-08-08 23:49:57 +02:00

ding

fix(health): skip fetchHealth re-render for non-resolving quick fixes

2026-05-27 21:20:58 +02:00

export

feat(export): encrypted diagnostic report for issue reporting

2026-05-21 20:02:57 +02:00

handlers

feat(admin): add tri-state AdminAreaAuth setting with default-creds guard rail

2026-08-08 23:49:57 +02:00

health

feat(health): flag speakers whose runtime bmxRegistryUrl is still on the Bose cloud (#577)

2026-07-26 21:11:10 +02:00

logbuf

feat(service): add Logs tab streaming the live stderr trace

2026-05-19 20:12:25 +02:00

marge

refactor(handlers): resolve client IP via a clientHost helper

2026-06-28 13:15:49 +02:00

proxy

sec8: move lgtm annotation above log.Printf to suppress CodeQL alert #294

2026-05-25 20:06:36 +02:00

setup

fix(setup): re-install the CA when it was regenerated, not just label-matched (refs #517)

2026-06-27 19:58:19 +02:00

soundtouchweb

chore: sync static dependencies with package.json

2026-08-06 11:40:59 +02:00

spotify

sec8: refactor zeroconf API to (host, port string) to close request-forgery alerts

2026-05-25 13:14:56 +02:00

stations

fix(web): play Radio Browser via native RADIO_BROWSER source (refs #479)

2026-06-08 20:44:31 +02:00

stockholm

fix(lint): sec6/sec7 post-pass — static.go Close + remove unused sanitizeErr

2026-05-25 11:28:26 +02:00

testing/fakespeaker

fixup: refine CodeQL XSS autofix (fakespeaker round-trip + lint)

2026-06-14 21:36:01 +02:00

tts

fix(tts): play via LOCAL_INTERNET_RADIO; accept app_key at /v1/auth

2026-05-31 22:35:31 +02:00

zeroconf

sec8: validate zeroconf port to break CodeQL taint chain (alerts 134/135/136)

2026-05-25 21:17:57 +02:00