- Instead of using eval() we now use a proper VM Context
- As a result, any scripting errors will now give a more useful filename and line number.
- However, some things may break, if they are dependant on variables we are not allowing in the context.
- wtv-tricks:/unregister properly deletes SSID folder
- Registration properly saves account data if SSID folder doesn't exist
- do not send wtv-mail-count if SSID is not yet registered
- Registration now correctly creates the welcome message for user0
- update wtv-tricks:/unregister to only allow the primary user to unregister the account
- likely adds new bug where users will be kicked to relogin after the
server restarts
- TODO: figure out a way to safely check the user login when session
data is unknown (eg restart) (hint: ticket?)
- fix broken session bust crap from before
- properly resume session as user when server restarted
- api available to store other things in the wtv-ticket
- fixed getUnreadMailCount
- added unread mail count to login screen
- added session busted detection (new bug that when you restart minisrv it loses the user_id, so we send the client to relog) (todo: maybe add api to add key/value to ticket so we can retain data over server restarts)
- move user accounts to subdir
- add password support
- implemented basics of multi-user support
- Can add users, edit them, and log in with them (password or not)
- Cannot delete users (with service) yet
- can get telly and reach stage-two
- narrow whitelist of allowed URLS in WTVClientSessionData constructor
- enough to show wtv-1800:/unauthorized with trust priv
- Times out lockeddown users really fast ;)
- untested disk error page