mirror of
https://github.com/rcourtman/Pulse.git
synced 2026-05-11 13:05:31 +00:00
958cacf042
Security Improvements: - Implement bcrypt password hashing (cost factor 12) - Add SHA3-256 API token hashing - Fix authentication enforcement after security setup - Improve restart mechanism to properly reload systemd environment - Add CSRF protection for all state-changing operations - Implement comprehensive rate limiting (10/min auth, 500/min API) - Remove sensitive data from logs - Add security audit test suite UI Enhancements: - Add Pulse logo to login screen with animations - Implement glassmorphism design for login form - Add gradient backgrounds and smooth animations - Enhance input fields with icons - Add loading spinner for authentication - Improve overall login page aesthetics Bug Fixes: - Fix security setup restart mechanism - Fix systemd environment variable inheritance - Fix CSRF validation for security endpoints - Fix password change and removal functionality Testing: - Add automated security test suite - Verify all authentication flows - Test rate limiting effectiveness - Validate CSRF protection
28 lines
No EOL
1,013 B
Bash
Executable file
28 lines
No EOL
1,013 B
Bash
Executable file
#!/bin/bash
|
|
# Script to remove authentication from Pulse systemd configuration
|
|
# This needs to be run with sudo
|
|
|
|
OVERRIDE_FILE="/etc/systemd/system/pulse-backend.service.d/override.conf"
|
|
|
|
if [ ! -f "$OVERRIDE_FILE" ]; then
|
|
echo "No override file found, authentication already removed"
|
|
exit 0
|
|
fi
|
|
|
|
# Remove all authentication-related environment variables from the override file
|
|
if grep -q "PULSE_AUTH_USER\|PULSE_AUTH_PASS\|PULSE_PASSWORD\|API_TOKEN" "$OVERRIDE_FILE"; then
|
|
# Create a backup
|
|
cp "$OVERRIDE_FILE" "$OVERRIDE_FILE.bak"
|
|
|
|
# Remove the authentication lines but keep other settings
|
|
grep -v "PULSE_AUTH_USER\|PULSE_AUTH_PASS\|PULSE_PASSWORD\|API_TOKEN" "$OVERRIDE_FILE" > "$OVERRIDE_FILE.tmp"
|
|
mv "$OVERRIDE_FILE.tmp" "$OVERRIDE_FILE"
|
|
|
|
# Reload systemd and restart the service
|
|
systemctl daemon-reload
|
|
systemctl restart pulse-backend
|
|
|
|
echo "Authentication removed successfully"
|
|
else
|
|
echo "No authentication configuration found in override file"
|
|
fi |