EventSnap

fabi/EventSnap

Fork 0

Commit Graph

Author	SHA1	Message	Date
fabi	498b4e256b	fix(security): critical — repair PIN reset + enforce real prod secrets C1: reset_user_pin wrote to a non-existent column (pin_failed_attempts); the real column is failed_pin_attempts, so every PIN reset 500'd. Fixed the column name; new e2e (pin-reset.spec.ts) proves a reset returns a usable PIN and the target can recover with it. C2: config.rs::validate_secrets now rejects placeholder-ish secrets (change_me/dev_secret/placeholder), enforces len>=32 in prod, and requires a real ADMIN_PASSWORD_HASH. docker-compose.yml sets APP_ENV=production so the guard actually runs. Corrected the false "fixed" claim in SECURITY-BACKLOG.md. .env.example documents the rule. Riders in these files (documented here since git can't split hunks): - host.rs also carries the event-scoped ban_user fix and the close_event/open_event no-op broadcast guard (medium). - docker-compose.yml also adds ORIGIN (H6), app/frontend healthchecks with Caddy waiting on health, and per-service memory limits (medium). Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-07-01 21:25:39 +02:00
fabi	b89b1d6ffa	chore: scaffold monorepo for EventSnap - Rust/Axum backend skeleton with all crates, multi-stage Dockerfile - SvelteKit + TypeScript frontend with Tailwind CSS v4, adapter-node, Dockerfile - docker-compose.yml: db (postgres:16) → app → frontend → caddy with healthcheck and named volumes - Caddyfile: TLS via Let's Encrypt, cache headers, API/media routing to backend - .env.example: all environment variables documented with defaults - README.md: project overview, features, stack, deploy guide, roadmap - .gitignore: excludes secrets, build artifacts, node_modules, media uploads Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-03-31 20:15:44 +02:00

Author

SHA1

Message

Date

fabi

498b4e256b

fix(security): critical — repair PIN reset + enforce real prod secrets

C1: reset_user_pin wrote to a non-existent column (pin_failed_attempts);
    the real column is failed_pin_attempts, so every PIN reset 500'd. Fixed
    the column name; new e2e (pin-reset.spec.ts) proves a reset returns a
    usable PIN and the target can recover with it.

C2: config.rs::validate_secrets now rejects placeholder-ish secrets
    (change_me/dev_secret/placeholder), enforces len>=32 in prod, and
    requires a real ADMIN_PASSWORD_HASH. docker-compose.yml sets
    APP_ENV=production so the guard actually runs. Corrected the false
    "fixed" claim in SECURITY-BACKLOG.md. .env.example documents the rule.

Riders in these files (documented here since git can't split hunks):
- host.rs also carries the event-scoped ban_user fix and the
  close_event/open_event no-op broadcast guard (medium).
- docker-compose.yml also adds ORIGIN (H6), app/frontend healthchecks with
  Caddy waiting on health, and per-service memory limits (medium).

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-07-01 21:25:39 +02:00

fabi

b89b1d6ffa

chore: scaffold monorepo for EventSnap

- Rust/Axum backend skeleton with all crates, multi-stage Dockerfile
- SvelteKit + TypeScript frontend with Tailwind CSS v4, adapter-node, Dockerfile
- docker-compose.yml: db (postgres:16) → app → frontend → caddy with healthcheck and named volumes
- Caddyfile: TLS via Let's Encrypt, cache headers, API/media routing to backend
- .env.example: all environment variables documented with defaults
- README.md: project overview, features, stack, deploy guide, roadmap
- .gitignore: excludes secrets, build artifacts, node_modules, media uploads

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-03-31 20:15:44 +02:00

2 Commits