2 Commits

Author	SHA1	Message	Date
Hartmut	110e4ff1aa	fix(security): harden auth reset, rate limiter fallback, and CI secrets ... - Move CI_AUTH_SECRET from plaintext to ${{ secrets.CI_AUTH_SECRET }} - Wrap password reset (update + session kill + token mark) in $transaction to prevent stale sessions on partial failure (CWE-613) - Rate limiter Redis fallback now uses stricter degraded limits (maxRequests/10) and logs at error level instead of warn Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-04-11 08:03:42 +02:00
Hartmut	ef5e8016a4	refactor(api): add redis-backed rate limiting fallback	2026-03-30 23:23:56 +02:00