3.1.6

Features & Improvements​

• Email OTP Two-Factor Authentication (Admin & User Panels):
  • Added Email OTP (One-Time Password) two-factor authentication security method for both HiTechAdmin (hitechadmin) and HiTechCloud Panel (hitechcloud), utilizing Admin SMTP relay configuration (/etc/hitechcloud/hitechcloud/conf/hitechcloud.config).
  • Cryptographically secure 6-digit one-time passcode generation with 10-minute expiration and rate-limited resend capabilities.
  • Dedicated Email OTP settings management UI in both Admin and User panels with instant code verification, password confirmation on disable, and dual-challenge support alongside TOTP Authenticator apps (Google Authenticator, Microsoft Authenticator).
  • Clean login 2FA challenge screens with masked destination email hints, numeric 6-digit input, and "Resend verification code" actions.
• Passkeys (FIDO2 / WebAuthn) Authentication:
  • Full Passkey authentication support with robust multi-origin / reverse proxy origin resolution (X-Forwarded-Host, X-Forwarded-Proto).
  • Strict WebAuthn credential assertion verification with cross-origin safeguards and seamless passwordless sign-in across both Admin and User panels.
• TOTP 2FA Time Drift Tolerance:
  • Increased TOTP clock skew validation window (Skew: 2) to tolerate timestamp offsets on edge devices and authenticators without failing valid login attempts.
• System Installation Repair Mechanism:
  • Added --repair / repair subcommand in hitechcloudcli update --repair and hitechcloudcli repair (hitechcloudcli/repair.sh, hitechcloudpanel/hitechcloudcli-scripts/repair.sh).
  • Performs comprehensive health repair: clears stale upgrade locks, re-links static binaries (hitechcloud, hitechadmin, hitechcloudwaf, hitechcloudcli, hitechcloud-jail, hitechcloud-shell), restores system directory permissions, refreshes CLI dispatchers, re-syncs native stack templates, rebuilds virtual hosts, and restarts panel services.
  • Added "Repair Installation" action in the Admin Web UI (/settings/updates) for one-click background repair.
• User Multi-WebServer UI Streamlining:
  • Simplified the User Multi-WebServer view by removing raw infrastructure architecture tables and low-level system diagnostic lists, keeping the interface clean and focused on user-assigned domains and web engines.
• Migration & Update Automation (3.1.6): Created version/3.1.6/UPDATE.sh script to automate database column verification, CLI script permissions, vhost synchronization, and service reloads.