mirror of
https://github.com/HeyPuter/puter.git
synced 2026-10-21 02:52:06 +00:00
Daniel Salazar
8a6929847d
* auth: per-account 2FA code limit, single-use otp-login tokens, recovery mail limits - /login/otp and /login/recovery-code share a per-account bucket charged on wrong codes; an otp-login token completes one sign-in. - /send-pass-recovery-email adds an IP bucket, a per-account cap and captcha, and reuses the outstanding recovery token instead of rotating it. - Reauth tokens carry the rejection reason; /signup re-attaches a temp account only from an expired session. * auth: app-issued access tokens older than their app stop authenticating An access token whose row or parent session predates the app now holding its uid is refused, the same check app and worker sessions already get. * teams: signup can take an address a seat never confirmed Password signup, save-account and a provider-verified OIDC sign-up take an address a team seat holds unconfirmed; the seat's copy is cleared at the write. A seat address that was confirmed still blocks. * dev-center: encode dropped directory child names
Dev Center
The easiest way to publish and manage web apps.
« LIVE DEMO »
Puter.com
·
SDK
·
Discord
·
Reddit
·
X (Twitter)
Dev Center
Dev Center is a Puter app that allows you to publish and manage web apps. It is built with Puter SDK and is available on Puter.com as well as the self-hosted Puter.
License
Dev Center is licensed under the AGPL-3.0 license.
Icons
jolloficons under MIT license.
Credit Card & Payment Icons under Apache-2.0 license.
Bootstrap Icons under MIT license.
svg-spinners under MIT license.