nexxo 04ba9dd2a9 fix(vpn): an open modal stops serving the config once access is revoked ... Once revealed, the plaintext sits in the handoff cache for ten minutes, and the modal read it from the token alone. A former owner could keep pulling the key out of an open modal after revocation — the exact window purgeSecret() exists to close. Every request now re-checks the policy and drops the handoff when it no longer holds. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>		2026-07-25 22:39:30 +02:00
..
Admin	fix(vpn): an open modal stops serving the config once access is revoked	2026-07-25 22:39:30 +02:00
Auth	fix(auth): throttle Fortify endpoints (registration had no limiter — signup-spam guard)	2026-07-25 18:38:44 +02:00
Provisioning	feat(admin): VPN access management with live peer state	2026-07-25 21:38:12 +02:00
BillingTest.php	feat(portal): billing page — current plan, upgrades, extra storage, add-ons	2026-07-25 13:36:52 +02:00
ComponentTest.php	feat(portal): Fortify auth + Login/2FA/Dashboard + component kit	2026-07-25 01:20:25 +02:00
DashboardTest.php	feat(portal): Fortify auth + Login/2FA/Dashboard + component kit	2026-07-25 01:20:25 +02:00
ExampleTest.php	chore: bootstrap CluPilot control-plane (Laravel 13, Docker stack)	2026-07-25 00:21:30 +02:00
ImpersonationTest.php	fix(admin): harden impersonation + datacenter code per Codex review	2026-07-25 13:50:16 +02:00
OperatorInPortalTest.php	fix(portal): no silent no-ops without a customer; maintenance visible per instance; maintenance form redesign	2026-07-25 19:10:44 +02:00
PortalTabsTest.php	feat(portal): bind the cloud card to the real instance (plan/seats/domain/quota) so the maintenance badge matches it	2026-07-25 19:14:42 +02:00
SeatsTest.php	feat(portal): seats management — invite/role/revoke against plan limit	2026-07-25 14:40:18 +02:00
SettingsTest.php	fix(portal): enforce customer lifecycle per Codex review	2026-07-25 14:45:03 +02:00
WelcomeTest.php	feat(landing): public marketing homepage at / (+ legal placeholders)	2026-07-25 08:59:39 +02:00