nexxo 04ba9dd2a9 fix(vpn): an open modal stops serving the config once access is revoked ... Once revealed, the plaintext sits in the handoff cache for ten minutes, and the modal read it from the token alone. A former owner could keep pulling the key out of an open modal after revocation — the exact window purgeSecret() exists to close. Every request now re-checks the policy and drops the handoff when it no longer holds. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>		2026-07-25 22:39:30 +02:00
..
AdminConsoleTest.php	feat(admin): dark Tactical-Terminal operator console	2026-07-25 08:35:03 +02:00
AdminHostRestrictionTest.php	fix(security): match ADMIN_HOSTS case-insensitively; share test helpers	2026-07-25 20:56:26 +02:00
AdminSettingsTest.php	fix(admin): shown-once temp password for invited staff; suppress announcements for cancelled windows at send time	2026-07-25 16:23:21 +02:00
DatacenterTest.php	fix(admin): no admin lockout (is_admin fallback); centered modal width; datacenter edit modal + country dropdown	2026-07-25 18:09:17 +02:00
HostManagementTest.php	fix(security): match ADMIN_HOSTS case-insensitively; share test helpers	2026-07-25 20:56:26 +02:00
MaintenanceTest.php	fix(portal): scope the per-instance maintenance badge to that instance's host	2026-07-25 19:12:33 +02:00
ProvisioningActionsTest.php	fix(ui): modal above sidebar (z-index); datacenter edit buttons stay right; toast slides from bottom; provisioning retry action	2026-07-25 15:29:37 +02:00
RbacTest.php	fix(security): match ADMIN_HOSTS case-insensitively; share test helpers	2026-07-25 20:56:26 +02:00
VpnTest.php	fix(vpn): an open modal stops serving the config once access is revoked	2026-07-25 22:39:30 +02:00