Dominik 868733abb4 Check for allOf definitions in an array defining arrays of objects where all components must be checked. Also remove a bit pointless comparison between YAML examples and FTL output. We already validate the YAML examples against the YAML schema which is enough. This avoids false-positives when FTL happens to return a different number of items than we have examples (which is perfectly fine) ...

Signed-off-by: Dominik <dl6er@dl6er.de>

2025-12-14 18:47:45 +01:00

..

json

!!! BREAKING CHANGE !!! Switch to the proven memory-hard password-hashing alogorithm BALLOON. The stored password hash will be upgraded on the first successdful login. To wave the necessity to implement BALLOON with every client trying to access the API, we remove the existing challenge-response authentication in favor of allowing login straight with the password. This has been avoided in the past, however, seems now acceptable that FTL (even by default) offers secure end-to-end encryption over HTTPS.

2023-05-30 21:22:45 +02:00

libs

Check for allOf definitions in an array defining arrays of objects where all components must be checked. Also remove a bit pointless comparison between YAML examples and FTL output. We already validate the YAML examples against the YAML schema which is enough. This avoids false-positives when FTL happens to return a different number of items than we have examples (which is perfectly fine)

2025-12-14 18:47:45 +01:00

checkAPI.py

Really skip on RICV64

2025-06-02 19:57:02 +02:00

openapi-enforcer.js

Also allow authentication by sending SID via HEADER

2021-02-03 09:08:23 +01:00

test-rate-limit.py

Add rate-limiting on password login attempts

2023-10-07 19:59:32 +02:00