Anso 2d6b4c233d fix(security): pre-launch security hardening audit & remediation (#320) ...

- Webhook HMAC: capture raw request bytes via express.json verify callback
  instead of re-serializing with JSON.stringify
- AES-256-GCM: use NIST-recommended 12-byte IV (backward compatible with
  existing 16-byte IVs)
- Node proxy tokens: add 1-year default expiry (previously no expiry)
- Host console env filtering: pattern-based approach blocking SECRET,
  PASSWORD, TOKEN, KEY, CREDENTIAL keywords (previously only 4 explicit keys)
- CORS: deny cross-origin requests when FRONTEND_URL is unset in production
  (previously fell back to allowing all origins)

2026-04-01 20:50:43 -04:00

..

src

fix(security): pre-launch security hardening audit & remediation (#320)

2026-04-01 20:50:43 -04:00

.npmrc

chore(deps): upgrade major dependencies (ESLint 10, recharts 3, TS 6, Vite 8) (#130)

2026-03-25 00:03:08 -04:00

eslint.config.mjs

feat: RBAC, atomic deployments, fleet backups, and licensing (Pro) (#185)

2026-03-26 21:58:24 -04:00

package-lock.json

chore(deps): bump express-rate-limit from 8.3.1 to 8.3.2 in /backend (#310)

2026-04-01 18:49:41 -04:00

package.json

chore(deps): bump ldapts from 4.2.6 to 8.1.7 in /backend (#306)

2026-04-01 18:48:44 -04:00

tsconfig.json

Initial commit: Sencho V1 complete with Auth and Dockerization

2026-02-20 18:39:32 -05:00

vitest.config.ts

feat: RBAC, atomic deployments, fleet backups, and licensing (Pro) (#185)

2026-03-26 21:58:24 -04:00