codegirl007
29b0536215
Address production-readiness review: clearer errors, safer votes, and ops hardening.
...
Distinguish auth/lookup failures, make votes idempotent on visible questions, bound shutdown, page admin users, LRU throttle, trusted-proxy CIDRs, avatar cleanup, versioned migrations, and session cleanup logging.
2026-08-22 12:16:59 -07:00
codegirl007
59513ab75e
Harden auth: setup secret, throttling, session destroy, secure cookies.
...
Replace username-based admin bootstrap with a one-time setup secret, rate-limit login/register, equalize login bcrypt timing, cap passwords at 72 bytes, destroy sessions on logout, and require Secure cookies when PORT is set.
2026-08-22 11:47:42 -07:00
codegirl007
afd2476f3c
Harden sessions, uploads, admin demotion, and HTTP timeouts.
...
Address PR review findings: renew session tokens on auth, sniff/re-encode avatars, serialize last-admin checks, bound server timeouts, rune-safe truncation, and TEST_DATABASE_URL-only integration tests.
2026-08-22 07:24:39 -07:00
codegirl007
3391cce7bd
Address PR review: graceful shutdown, Role/NewUser, drop SQLite.
2026-08-21 23:40:59 -07:00
codegirl007
d167b9216a
Initial commit: runnable Ask a Plumber First server.
2026-08-21 23:30:15 -07:00
codegirl007