master
implemented zero-knowledge architecture - moved account and note encryption/decryption fully to the client - added client-side master password verifier flow and removed server-side secret decryption - updated development database bootstrap behavior for the new schema
Rework vault encryption and frontend pages - Added TOTP page to password-manager-ui - Added KuznyechikLib and used Kuznyechik with nonce for notes and account passwords - Added backward compatibility: old RSA-encrypted notes and accounts are still supported - Added master password validation endpoint to avoid false "wrong master password" errors Some bugs fixed: - Notes, accounts and favorites pages were reworked: removed excessive polling and fixed modal opening - Favorites page has been changed, since editing entities there did not sync correctly with notes/accounts pages - Fixed note decryption and favorites loading for the new encrypted data format - Fixed frontend state issues where opening favorites could replace the full notes list with only favorite notes
expanded security settings, sessions, audit logs, and dev network access
improve auth recovery, sessions, and mobile UI
- removed development preview codes from API responses and UI - configured SMTP flow for real email delivery testing - prevented SMTP failures from crashing auth requests - improved forgot password modal with step-by-step recovery
Add secure notes and favorites feature - Created Note entity with RSA-encrypted content - Designed and implemented Favorite table for storing favorite items (accounts, notes, etc.) - Fixed bugs related to DI service registration and nullable columns - Improved API responses by properly awaiting async service methods - Refactored frontend
What's new:
harden frontend session handling and add password tools
refined UI styling, reorganize shared styles, and improve navigation
Added two-factor authentication Added the ability to upload QR codes Added the ability to use the app to generate TOTP codes