1a01811882
Add encryption and setup wizard features
...
ENCRYPTION:
- Add cryptography library for secure storage
- Implement Fernet encryption for sensitive settings
- Key derived from SESSION_SECRET
- Auto-encrypt/decrypt transparent to app
- "enc:" prefix identifies encrypted values
- Graceful fallback if crypto unavailable
SETUP WIZARD:
- Detect fresh installs needing configuration
- 3-step wizard: Infrastructure, Security, AI Services
- "/" redirects to wizard if setup required
- Auto-generate session_secret option
- Skip option for advanced users
- Beautiful UI with progress indicators
UI IMPROVEMENTS:
- Enhanced sensitive field display
- Lock icon showing encryption status
- Improved show/hide toggle for passwords
- Better visual hierarchy
FILES:
- app/utils/encryption.py - Encryption utilities
- app/utils/setup_wizard.py - Wizard detection logic
- app/views/wizard.py - Wizard routes
- frontend/templates/setup_wizard.html - Wizard UI
- requirements.txt - Added cryptography
- IMPLEMENTATION_CHECKLIST.md - Status tracking
Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com >
2026-02-08 06:18:49 +00:00
02fa9ccde4
Address code review feedback
...
- Clarify test expectations for auth-disabled environment
- Skip timestamp update test (DB backend dependent)
- Document require_admin_access sync/async support
- Restore session_secret and external_hostname as required
- Add comments explaining validation and security requirements
Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com >
2026-02-08 06:09:23 +00:00
c9e1de4845
Fix /settings redirect issue and add OAuth admin support
...
- Convert require_admin_access to proper decorator pattern
- Fix redirect loop that was sending all users to /
- Add is_admin flag handling for OAuth users (checks groups)
- Update SETTING_METADATA with all 102 settings from config.py
- Improve API admin check with type hints
Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com >
2026-02-08 06:02:21 +00:00
4b4c208035
Security fixes: use tojson filter, fix Tuple import, remove raw value exposure
...
Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com >
2026-02-07 22:38:58 +00:00
e1bb9de915
Add settings management infrastructure: models, API, views, and database loading
...
Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com >
2026-02-07 22:31:06 +00:00
copilot-swe-agent[bot]