Files
felhom.eu/documentation/audits/release-2026-10-09/proofs/D4/d4.txt
T

19 lines
970 B
Plaintext

== D4 on scratch 9202 (controller 0.304.0) 2026-10-09T05:37:58Z
login: HTTP/2 302 , cookie present: yes
before restart: GET /api/settings -> 404
control, no cookie: GET /api/settings -> 401
before restart: /api/stacks with cookie -> 200, without -> 401
started 2026-10-09T05:37:26.038905595Z
started 2026-10-09T05:38:12.928521354Z healthy
after restart: /api/stacks with the SAME cookie -> 200, without -> 401
after restart: /settings with cookie -> 200
== part 2 2026-10-09T05:39:10Z: change the password (temp value kept out of the record), then restart
csrf scraped: yes
change: 302 -> https://192.168.0.114/login?flash=flash.login.password_changed
right after the change: old cookie A -> 401, cookie B -> 401
restarted 2026-10-09T05:39:24.066966039Z healthy
after the restart: old cookie A -> 401, cookie B -> 401
positive control: a new sign-in with the new password -> /api/stacks 200
password set back: 302
the original password signs in again -> /api/stacks 200