Bernt 8921fd1467 security: Fix critical security vulnerabilities ...

- Remove secrets from Git (.env)
- Remove debug token endpoint
- Fix login to reject unauthorized access in production
- Remove HS256 fallback in JWT validation (RS256 only)
- Fix SQL injection in journal.go countQuery
- Fix CORS to use explicit origins only (no wildcard)
- Add security headers middleware (CSP, HSTS, etc.)
- Add input validation helpers
- Build successful

2026-08-10 11:26:58 +00:00

..

apikey.go

feat: integrate Grafana dashboards into BOC DashboardPage

2026-07-29 19:03:06 +00:00

auth_test.go

LINUS ROUND 1: Delete dead code (rust/c), generic Store[T], tests, slim main.go

2026-07-14 12:31:55 +00:00

auth.go

feat: integrate Grafana dashboards into BOC DashboardPage

2026-07-29 19:03:06 +00:00

cors.go

security: Fix critical security vulnerabilities

2026-08-10 11:26:58 +00:00

jwt.go

security: Fix critical security vulnerabilities

2026-08-10 11:26:58 +00:00

security.go

security: Fix critical security vulnerabilities

2026-08-10 11:26:58 +00:00

tenant.go

feat: integrate Grafana dashboards into BOC DashboardPage

2026-07-29 19:03:06 +00:00

validation.go

security: Fix critical security vulnerabilities

2026-08-10 11:26:58 +00:00