codegirl007/plumber
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
23 Commits 10 Branches 0 Tags
posts-routes
Commit Graph
5 Commits
Author SHA1 Message Date
codegirl007 59513ab75e Harden auth: setup secret, throttling, session destroy, secure cookies. 
Replace username-based admin bootstrap with a one-time setup secret, rate-limit login/register, equalize login bcrypt timing, cap passwords at 72 bytes, destroy sessions on logout, and require Secure cookies when PORT is set.
 2026-08-22 11:47:42 -07:00
codegirl007 96b0ce795a Address follow-up review: cheaper avatars, list limits, less chatter. 
Switch avatar resize to ApproxBiLinear, cap hunt/profile/admin list queries, drop redundant admin/profile lookups, dedupe CI on app PRs, and refresh stale todo.md notes.
 2026-08-22 09:55:32 -07:00
codegirl007 afd2476f3c Harden sessions, uploads, admin demotion, and HTTP timeouts. 
Address PR review findings: renew session tokens on auth, sniff/re-encode avatars, serialize last-admin checks, bound server timeouts, rune-safe truncation, and TEST_DATABASE_URL-only integration tests.
 2026-08-22 07:24:39 -07:00
codegirl007 f31f352838 Remove remaining SQLite-only schema and docs residue. 2026-08-21 23:55:09 -07:00
codegirl007 d167b9216a Initial commit: runnable Ask a Plumber First server. 2026-08-21 23:30:15 -07:00