🔐 2FA-Safe Authentication (#110)
- API Token Auto-Creation — When adding a cluster with username + password, PegaProx automatically creates a PVE API token (
pegaprox_XXXXXX). REST API calls use the token, SSH features keep using the password - 2FA Compatible — Proxmox 2FA (TOTP) can now be enabled without breaking PegaProx connectivity
- Token Fallback — If a stored token gets revoked on PVE, PegaProx falls back to password auth on next reconnect
- Auto-Cleanup — Token is automatically revoked on PVE when the cluster is removed from PegaProx
- Better 401 Errors — Authentication failures now suggest API token usage when 2FA might be the cause
🎨 UI Improvements
- Corporate Layout — Improved sidebar, storage cards, and compact VM table for the corporate theme
- Auth Mode Info — New info card in cluster settings showing current API auth mode (Token vs Password) and SSH auth
- Ceph OSD Display — Fixed OSD list not showing on some PVE versions (CRUSH tree flattening, #113)
🐛 Fixes
- Cluster Groups — Groups no longer reset when adding a new cluster (#111)