plumber

T

codegirl007 59513ab75e Harden auth: setup secret, throttling, session destroy, secure cookies.

Replace username-based admin bootstrap with a one-time setup secret, rate-limit login/register, equalize login bcrypt timing, cap passwords at 72 bytes, destroy sessions on logout, and require Secure cookies when PORT is set.

2026-08-22 11:47:42 -07:00

.github/workflows

Address follow-up review: cheaper avatars, list limits, less chatter.

2026-08-22 09:55:32 -07:00

cmd/server

Harden auth: setup secret, throttling, session destroy, secure cookies.

2026-08-22 11:47:42 -07:00

db/queries

Address follow-up review: cheaper avatars, list limits, less chatter.

2026-08-22 09:55:32 -07:00

internal

Harden auth: setup secret, throttling, session destroy, secure cookies.

2026-08-22 11:47:42 -07:00

static

Initial commit: runnable Ask a Plumber First server.

2026-08-21 23:30:15 -07:00

templates

Harden auth: setup secret, throttling, session destroy, secure cookies.

2026-08-22 11:47:42 -07:00

.air.toml

Initial commit: runnable Ask a Plumber First server.

2026-08-21 23:30:15 -07:00

.env.example

Harden auth: setup secret, throttling, session destroy, secure cookies.

2026-08-22 11:47:42 -07:00

.gitignore

Remove remaining SQLite-only schema and docs residue.

2026-08-21 23:55:09 -07:00

embed.go

Initial commit: runnable Ask a Plumber First server.

2026-08-21 23:30:15 -07:00

go.mod

Harden sessions, uploads, admin demotion, and HTTP timeouts.

2026-08-22 07:24:39 -07:00

go.sum

Harden sessions, uploads, admin demotion, and HTTP timeouts.

2026-08-22 07:24:39 -07:00

Makefile

Adopt sqlc for typed Postgres queries behind store entities.

2026-08-22 06:59:56 -07:00

schema.sql

Replace scs postgresstore with a sqlc-backed SessionStore.

2026-08-22 07:11:47 -07:00

sqlc.yaml

Adopt sqlc for typed Postgres queries behind store entities.

2026-08-22 06:59:56 -07:00

todo.md

Harden auth: setup secret, throttling, session destroy, secure cookies.

2026-08-22 11:47:42 -07:00