F4ilji
997ef6d483
fix(vikon): syncDirFiles saves to correct subdirectory, increase timeouts to 600s
2026-07-04 21:49:17 +05:00
F4ilji
87732720ef
feat(vikon): merge core update + FM sync into single Update button
2026-07-04 21:25:29 +05:00
F4ilji
e64f9cca83
fix(vikon): save ABITUR API response in temp for reference
2026-07-04 20:26:25 +05:00
F4ilji
b4829492e5
fix(vikon): keep ZIP archive in temp after update
2026-07-04 20:17:33 +05:00
F4ilji
d358e6fdb0
fix(vikon): keep downloaded files in temp after update
2026-07-04 20:16:56 +05:00
F4ilji
e0cf362433
fix(vikon): create target directories before rename in syncFiles
2026-07-04 19:29:50 +05:00
F4ilji
0097a803b4
fix(vikon): sync from extracted subdirectory inside ZIP
2026-07-04 19:21:32 +05:00
F4ilji
13df1c3a64
fix(vikon): simplify syncFiles - just overwrite, no backups or deletes
2026-07-04 19:11:25 +05:00
F4ilji
93bd3963bf
fix(vikon): use rename() instead of copy() for syncFiles - atomic, no extra disk space
2026-07-04 19:09:13 +05:00
F4ilji
3dc29d44d8
fix(vikon): DNS bypass, OAuth callback, ABITUR init, token cache, ZIP security
...
- Add CURLOPT_RESOLVE DNS bypass for db-nica.ru / file.db-nica.ru
- Add OAuth callback route with CSRF state validation
- Add /authorize endpoint to generate OAuth URL with state
- Add ABITUR special case: init empty module core without ZIP download
- Add token validation caching (150s) to reduce API calls
- Block PHP/PHTML/PHAR files inside ZIP before extraction
- Add VikonTokenRefresh middleware for auto token refresh
- Add vikon.refresh middleware alias to Kernel
2026-07-04 17:44:50 +05:00
F4ilji
f4f8bc8e77
feat(vikon): rewrite VikonIntegration from scratch — OAuth + core update
...
- HttpTask: Laravel Http facade with SSL enabled, retry, timeout
- ValidateTokenTask: token check via auth.db-nica.ru
- RefreshTokenTask: token refresh via db-nica.ru
- FilesystemTask: path traversal protection, blocked extensions (PHP/ASP/etc)
- AuthenticateAction: OAuth2 code→token exchange
- CheckAccessAction: token validation + filesystem writability check
- CheckVersionAction: version comparison against remote API
- UpdateCoreAction: ZIP download, Zip Slip protection, atomic sync with rollback
- VikonController: thin controller, 7 endpoints with Session-based token storage
- Routes: access-check, dashboard.auth, throttle:30,1 middleware
- Vue 3 Composition API frontend with progress bar
- Config: all secrets in .env via config/vikon.php
- vikon_core kept as fallback (not deleted)
2026-07-04 12:53:28 +05:00
F4ilji