fix: a shell opens without the password and code again while the user's last use of a shell is within web.shell_auth_timeout minutes.

debian-package/debian/changelog

@@ -1,3 +1,14 @@
+vpn-router (0.25.4-1) unstable; urgency=medium
+
+  fix: a shell opens without the password and code again while the user's last use of a shell is within web.shell_auth_timeout minutes.
+
+  * New setting web.shell_auth_timeout, 15 minutes by default, 0 to 1440:
+    POST /shell without a password gives a ticket while the user's last
+    sign-in of POST /shell or keystroke in a shell is within it, and a
+    null ticket otherwise; 0 asks for the password and code every time.
+
+ -- Slawomir Koszewski <slawek@koszewscy.waw.pl>  Tue, 03 Nov 2026 06:00:00 +0100
+
 vpn-router (0.25.3-1) unstable; urgency=medium
 
   fix: /config gives the state of caddy.service with the installed Caddy, for the Router Manager's Web page.