gomcp/internal/infrastructure/auth
DmitrL-dev a54c892736 security: deep audit fixes — error leak prevention, DOMPurify XSS guard, mutex race fix, i18n parity, HMAC warning
- [C-1] Fix sync.Mutex copy in guard.GuardStats (go vet race condition)
- [C-2] Replace 3x raw err.Error() HTTP leaks with generic messages (tenant_handlers, ws_transport, immune)
- [M-1] Add isomorphic-dompurify to LegalPage and AIAssistant (XSS defense-in-depth)
- [M-4] Add swaggo/swag dependency for Swagger docs
- [L-4] Add slog.Warn for hardcoded dev HMAC key in tpmaudit
- [L-5] Add 2 missing i18n keys (nav.contacts, nav.start_free) — 365/365 parity
2026-03-31 19:52:21 +10:00
..
demo_seed.go feat(ci): implement SDD-107 GitHub Actions automation 2026-03-31 11:19:46 +10:00
handlers.go feat(ci): implement SDD-107 GitHub Actions automation 2026-03-31 11:19:46 +10:00
jwt.go sec: fix C4/C5/M4/M5 + domain migration to syntrex.pro 2026-03-24 11:49:33 +10:00
jwt_test.go Release prep: 54 engines, self-hosted signatures, i18n, dashboard updates 2026-03-23 16:45:40 +10:00
middleware.go fix(auth): whitelist /api/auth/demo in JWT middleware to fix demo login 2026-03-31 08:38:46 +10:00
rate_limiter.go Release prep: 54 engines, self-hosted signatures, i18n, dashboard updates 2026-03-23 16:45:40 +10:00
rate_limiter_test.go Release prep: 54 engines, self-hosted signatures, i18n, dashboard updates 2026-03-23 16:45:40 +10:00
tenant_handlers.go security: deep audit fixes — error leak prevention, DOMPurify XSS guard, mutex race fix, i18n parity, HMAC warning 2026-03-31 19:52:21 +10:00
tenants.go feat(ci): implement SDD-107 GitHub Actions automation 2026-03-31 11:19:46 +10:00
usage.go chore: Apply dashboard audit remediations, sync engine counts, update APIs 2026-03-27 16:54:18 +10:00
users.go feat(ci): implement SDD-107 GitHub Actions automation 2026-03-31 11:19:46 +10:00