Zaki c8c7b69ae0 Phase 5: CSRF, bcrypt hashing, audit logging, export re-auth ...

- Add CSRF token per session, validated on all state-changing requests (POST/PUT/DELETE)
- Upgrade password hashing from PBKDF2 to bcrypt; auto-upgrade old hashes on login
- Add audit_log table tracking all security events (login, export, delete, etc.)
- Add /reauth endpoint requiring master password before export
- Client-side: re-auth modal before export, X-CSRF-Token header on mutations

2026-05-08 23:14:07 +01:00

css

add delete confirm, cancel shortcut + batch operations

2026-05-08 19:59:56 +01:00

js

Phase 5: CSRF, bcrypt hashing, audit logging, export re-auth

2026-05-08 23:14:07 +01:00

api.php

Phase 5: CSRF, bcrypt hashing, audit logging, export re-auth

2026-05-08 23:14:07 +01:00

index.html

Phase 5: CSRF, bcrypt hashing, audit logging, export re-auth

2026-05-08 23:14:07 +01:00

vault.db

add delete confirm, cancel shortcut + batch operations

2026-05-08 19:59:56 +01:00

S

Description

full local password manager

1.2 MiB

Languages

JavaScript 51.8%

Pascal 30.5%

CSS 7.4%

HTML 6.3%

PHP 3.2%

Other 0.7%