Update README to remove password hashing section and add read-only sharing links for inquiries; simplify inquiry template by always displaying refresh notice.
This commit is contained in:
parent
65fb1879b6
commit
213e1c1e86
2 changed files with 10 additions and 11 deletions
13
README.md
13
README.md
|
@ -141,12 +141,6 @@ The following security enhancements are planned for future releases:
|
|||
- Implement rate limiting for failed login attempts
|
||||
- Add IP-based blocking after multiple failed attempts
|
||||
|
||||
### Password Hashing
|
||||
- [ ] Replace SHA-256 with Argon2 password hashing
|
||||
- Argon2 is the winner of the Password Hashing Competition and provides better protection against various attacks
|
||||
- Implement password migration strategy for existing accounts
|
||||
- Update password verification logic to support both hash formats during transition
|
||||
|
||||
### Authentication Methods
|
||||
- [ ] Add OAuth 2.0 support for admin authentication
|
||||
- Integrate with common providers (Google, GitHub, Microsoft)
|
||||
|
@ -160,3 +154,10 @@ The following security enhancements are planned for future releases:
|
|||
- Automatically delete closed inquiries after 2 days
|
||||
- Allow reopening inquiries before deletion occurs
|
||||
- Provide visual indicators for closed inquiries in admin interface
|
||||
|
||||
### Read-Only Links
|
||||
- [ ] Implement read-only sharing links for inquiries
|
||||
- Generate unique, cryptographically secure sharing links
|
||||
- Allow users to create links that provide view-only access
|
||||
- Set optional expiration times for sharing links
|
||||
- Allow users to revoke sharing links at any time
|
||||
|
|
|
@ -51,11 +51,9 @@
|
|||
{% endif %}
|
||||
</div>
|
||||
|
||||
{% if not is_admin %}
|
||||
<div class="refresh-notice">
|
||||
<p><em>Please refresh the page to see new messages.</em></p>
|
||||
</div>
|
||||
{% endif %}
|
||||
<div class="refresh-notice">
|
||||
<p><em>Please refresh the page to see new messages.</em></p>
|
||||
</div>
|
||||
|
||||
<div class="reply-form">
|
||||
<h3>{% if is_admin %}Respond as Admin{% else %}Reply{% endif %}</h3>
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue