summaryrefslogtreecommitdiffhomepage
path: root/modules/luci-base/root/usr
AgeCommit message (Collapse)Author
2022-07-08luci-base: use different cookie names for HTTP and HTTPSJo-Philipp Wich
Since HTTP cookies may not overwrite HTTPS ("secure") ones, users are frequently unable to log into LuCI when a stale, "secure" `sysauth` cookie is still present in the browser as it commonly happens after e.g. a sysupgrade operation or when frequently jumping between HTTP and HTTPS access. Rework the dispatcher to set either a `sysauth_http` or `sysauth_https` cookie, depending on the HTTPS state of the server connection and accept both cookie names when verifying the session ID. This allows users to log into a HTTP-only LuCI instance while a stale, "secure" HTTPS cookie is still present. Requires commit 2b0539ef9d ("lucihttp: update to latest Git HEAD") to function properly. Fixes: #5843 Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2022-05-03luci-base: fix DSL feature detectionJo-Philipp Wich
On boards with ADSL instead of VDSL support we need to expect an `/sbin/dsl_cpe_control` instead of an `/sbin/vdsl_cpe_control` executable. Ref: https://forum.openwrt.org/t/dsl-line-stats/126580 Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2022-01-25luci-base: explicitly invoke busybox applet for password changeJo-Philipp Wich
Ensure to invoke the Busybox `passwd` applet to change the system password in a non-interactive manner. Non-Busybox variants may not take the new password input from stdin or use password hashes which are not supported by musl's `crypt()` implementation by default. Fixes: #5629 Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2022-01-22luci-base: fix ubus luci.getConntrackHelpers call with firewall4Jo-Philipp Wich
Fallback to firewall4's helper list if the fw3 one cannot be loaded. Fixes broken zone configuration when firewall4 is installed as backend. Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2022-01-20luci-base: properly detect flow offloading capabilities with nftablesJo-Philipp Wich
When the system is running with nftables instead of iptables, the proprietary XT_FLOWOFFLOAD module will not be present, query the nft equivalent instead. Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2022-01-06luci-app-firewall: initial firewall4 compatibilityStijn Tintel
Initial changes required for firewall4 compatibility: * depend on uc-firewall instead of firewall * detect installed version of firewall and hide incompatible features Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be> Reviewed-by: Jo-Philipp Wich <jo@mein.io>
2021-10-28luci-base: add "dsl" system featureJo-Philipp Wich
Allows LuCI views to probe DSL presence using `L.hasSystemFeature('dsl')`. Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2021-10-11luci-base: dispatcher: rework dispatching and menu filtering logicJo-Philipp Wich
- Prefer nodes that do not require authentication over nodes that do - Honour ACL dependencies while resolving firstchild nodes - Consider currently active session while scanning menu tree instead of only loading effective ACLs when a login node is encountered - Do not consider nodes for firstchild dispatching which specify a special "firstchild_ineligible" property - Hide menu nodes that have no accessible children Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2021-01-02luci-mod-network: skip check for 802.11w featureDobroslaw Kijowski
OpenWrt commit 1a9b896d ("treewide: nuke DRIVER_11W_SUPPORT") enables 802.11w feature for all wpad/hostapd configurations. The feature flag was removed at all but for the compatibility reasons 11w is still advertised (but there's a plan to nuke it also) [1]. Remove conditional 802.11w LuCI support to match current behavior. [1]: https://github.com/openwrt/openwrt/pull/3347 Signed-off-by: Dobroslaw Kijowski <dobo90@gmail.com>
2020-10-31luci-base: fix syntax error in hostapd featuresMartin Böh
Signed-off-by: Martin Böh <mart.b@outlook.de>
2020-10-11luci-base: check support for hostapd wpsAnsuel Smith
Check if hostapd supports wps pushbutton features. (wps is now supported by ubus instead of using hostapd_cli) Signed-off-by: Ansuel Smith <ansuelsmth@gmail.com>
2020-08-02luci-base: Fixed delayed portstatus loading on R7800Nicolas Thumann
Signed-off-by: Nicolas Thumann <me@n-thumann.de>
2020-06-16Merge pull request #4127 from blocktrron/luci-wep-featuresJo-Philipp Wich
luci-mod-network: query WEP support
2020-06-16luci-base: move vpn sectionFlorian Eckert
Move the VPN configuration section behind the network configuration. The normal workflow is add/edit the network and then add/edit a vpn configuration. Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-06-02luci-base: grant uci rename permissionsJo-Philipp Wich
When doing an initial wireless configuration migration, LuCI needs to perform a series of rename calls which weren't allowed so far. Ref: https://forum.openwrt.org/t/config-migration-endless-loop/64340 Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2020-06-01luci-base: add queryable WEP WiFi featureDavid Bauer
This commit adds WEP as a queryable WiFi feature. Support for the deprecated WEP encryption is not compiled-in to hostapd or wpa_supplicant by default anymore. Allow LuCi to query the availability of WEP to remove it from the list of avialable encryption methods in case hostapd / wpa_supplicant are compiled without it. Signed-off-by: David Bauer <mail@david-bauer.net>
2020-04-25luci-base: make logout link depend on luci-base ACLJo-Philipp Wich
Fixes: #3966 Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2020-04-17luci-base: fix trainling comma in ACL specificationJo-Philipp Wich
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2020-04-16luci-base: implement JSON endpoint to fetch menu informationJo-Philipp Wich
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2020-04-09treewide: reorganize base ACLsJo-Philipp Wich
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2020-04-08Merge pull request #3769 from dibdot/logread-fixJo-Philipp Wich
luci-base: accept alternative logread location
2020-03-20luci-base: accept alternative logread locationDirk Brenken
* minimal change to accept the usual logread location plus the alternative location (/usr/sbin/logread) used by syslog-ng (see openwrt/packages/issues/11535 for reference) Signed-off-by: Dirk Brenken <dev@brenken.org>
2020-03-12luci-base: add relayd to getFeature listAnsuel Smith
Add /sbin/block to the generic Feature list to make it easily accessible by getProtocolHandlers Signed-off-by: Ansuel Smith <ansuelsmth@gmail.com>
2020-01-28luci-base: make swconfig port state parsing more robustJo-Philipp Wich
Since swconfig output varies wildly among different switch drivers, rely on a simpler more robust parsing approach to find the required information. Ref: https://forum.openwrt.org/t/cannot-read-property-link/50766 Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2020-01-25luci-base: allow loading translations when not authenticatedJo-Philipp Wich
Fixes: #3563 Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2020-01-16luci-base: correct rpcd bad access modeDavid Lam
Corrects the bad access mode from a previous commit that did not allow rpcd luci to execute. Signed-off-by: David Lam <david@thedavid.net>
2020-01-16luci-base: add system cert bundle detectionDavid Lam
Add detection mechanism for system cert CA bundle installed by the ca-bundle package. Used by LuCI to detect whether the "Use system certificates" certificate validation option should be enabled. Signed-off-by: David Lam <david@thedavid.net>
2019-12-29luci-mod-status: reimplement route status page as client side viewJo-Philipp Wich
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2019-12-22luci-mod-status: reimplement log pages as client side viewsJo-Philipp Wich
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2019-12-22luci-mod-status: reimplement iptables status page as client side viewJo-Philipp Wich
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2019-12-22luci-mod-status: replace iptables controller actions with cgi-io callsJo-Philipp Wich
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2019-12-18luci-mod-network: replace controller address check action with cgi-io scriptJo-Philipp Wich
This change removes the last bit of Lua code from luci-mod-network. Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2019-12-16luci-mod-network: reimplement diagnostics page as client side viewJo-Philipp Wich
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2019-12-16luci-base: convert menu nodes to JSONJo-Philipp Wich
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2019-11-08luci-base, luci-mod-network: migrate getDUIDHints method to C pluginJo-Philipp Wich
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2019-11-03luci-base, luci-app-firewall: port custom rules to client side viewJo-Philipp Wich
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2019-11-03luci-base, luci-mod-status: convert process status to client side viewJo-Philipp Wich
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2019-11-03luci-base: add luci/getProcessList RPC methodJo-Philipp Wich
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2019-11-03luci-base, luci-mod-network: invoke ifdown directly in interface overviewJo-Philipp Wich
Replace the `iface_down` endpoint with a direct invocation of `/sbin/ifdown` and replace the interface connectivity check with a call to the new `remote_addr` endpoint. Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2019-11-03luci-base, luci-mod-status: convert realtime stats to client side viewsJo-Philipp Wich
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2019-11-03luci-base: add luci/getRealtimeStats and luci/getConntrackList rpc methodsJo-Philipp Wich
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2019-11-01luci-app-opkg: add ipk upload featureRichard Yu
Signed-off-by: Richard Yu <yurichard3839@gmail.com> [fix duplicate upload errors, remove temporary file, tweak style] Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2019-11-01luci-mod-network: interfaces.js: issue iface restart via file/exec rpc callJo-Philipp Wich
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2019-11-01luci-mod-network: wireless.js: issue wifi restart via file/exec rpc callJo-Philipp Wich
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2019-11-01luci-mod-status: reimplement index status page as client side viewJo-Philipp Wich
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2019-11-01luci-base, luci-mod-system: replace luci/setUmount with fs.exec callsJo-Philipp Wich
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2019-11-01luci-base, luci-mod-system: replace luci/setReboot with fs.execJo-Philipp Wich
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2019-11-01luci-base: consolidate network.js data acquisitionJo-Philipp Wich
The new luci-rpc/getNetworkDevices procedure offers netdev enumeration with included IPv4 and IPv6 address information as well as 64bit traffic counters, so we can remove the calls to network.device/status and luci/getIfaddrs now as we're able to obtain all info from a single source. Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2019-11-01luci-base: migrate luci/getNetworkDevices to C pluginJo-Philipp Wich
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2019-11-01luci-base: migrate luci/getWirelessDevices to C pluginJo-Philipp Wich
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
generated by cgit v1.2.3 (git 2.39.1) at 2025-01-23 03:22:52 +0000