tliu93/home-automation
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 12 Wiki Activity

M4-T03: add admin_cli escape hatch (reset-password, unlock, list-admin)

Browse Source
This commit is contained in:
tliu93
2026-06-21 21:28:41 +02:00
parent e480a84a44
commit 5481fbc99c
3 changed files with 641 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/design/m4-login-hardening.md
+1 -1
View File
@@ -174,7 +174,7 @@ Phase B（TOTP，可选配）
- **Reviewer checklist**: 退避在验密码**之前**生效；双键较大值；XFF 仅在配置开启时信任；无把密码写进日志。
### M4-T03 — CLI 骨架 + reset-password + unlock
- **Status**: `todo` · **Depends**: M4-T01
- **Status**: `done` · **Depends**: M4-T01
- **Context**: 逃生通道第一批命令。
- **Files**: `create scripts/admin_cli.py`；`create tests/test_admin_cli.py`
- **Steps**: argparse 子命令；`reset-password <username> [--password|prompt(getpass)]` 用 Argon2 hasher 重置 `password_hash`；`unlock [--all|--ip|--username]` 删 `auth_login_throttle` 行；`list-admin`；复用 `get_session_local()` + 模型；无网络。