farhadh 56ce6073ce feat(auth): block panel with default admin/admin credentials and guide credential change ...

checkLogin middleware now detects default admin/admin credentials and
redirects every panel route to /panel/settings until they are changed.
The settings page auto-opens the Authentication tab, shows a
non-dismissible error banner, and lists 'Default credentials' first in
the security checklist. Login response includes mustChangeCredentials
so the login page can redirect directly. Logout is now POST-only.
Password must be at least 10 characters and cannot be admin/admin.

2026-05-11 21:16:22 +02:00

..

api

refactor(panel): rename injected globals + collapse QR modal entries

2026-05-10 23:40:39 +02:00

components

feat(panel): in-panel API documentation page

2026-05-11 13:57:42 +02:00

composables

fix(theme): default to dark, polish theme cycle visibility and hover

2026-05-11 12:51:37 +02:00

entries

feat(panel): in-panel API documentation page

2026-05-11 13:57:42 +02:00

i18n

Vue3 migration (#4198)

2026-05-09 17:47:35 +02:00

models

fix(outbound): default VLESS encryption to "none"

2026-05-10 23:06:28 +02:00

pages

feat(auth): block panel with default admin/admin credentials and guide credential change

2026-05-11 21:16:22 +02:00

utils

feat(inbounds): mobile card layout for inbounds and clients

2026-05-10 01:46:48 +02:00