Ochenstarik
|
b5467f617e
|
feat(security): Phase 2.2.3 Final Auth Security Gate - fix GET /api/giveaways IDOR, scoped DB query, Prisma ownership migration, atomic OAuth consumeTransaction, trusted production origin, rate limiting, and comprehensive security tests
|
2026-08-18 12:02:39 +07:00 |
|
Ochenstarik
|
02a04df271
|
feat(auth): Phase 2.2.2 Authorization Ownership Invariant Fix - strict requireGiveawayOwner null check, Prisma non-null organizerId with onDelete Restrict, repository non-null organizer invariant, migration documentation, and regression tests
|
2026-08-18 11:28:18 +07:00 |
|
Ochenstarik
|
7c5bf641cd
|
feat(auth): Phase 2.2 VK ID OAuth 2.1 Authentication - PKCE flow, single-use state, encrypted token vault, HttpOnly session, /api/auth endpoints, UI badge, and comprehensive security tests
|
2026-08-18 02:45:09 +07:00 |
|
Ochenstarik
|
26e82fcf8d
|
feat(core): Phase 1.3 Public Verification Integrity - drawId persistence, real participant snapshot and rules recalculation, reserve winners check, auditEventHash verification, strict snapshot lookup, and anti-tampering test suite
|
2026-08-18 00:15:30 +07:00 |
|
Ochenstarik
|
1bc6650041
|
feat(core): Phase 1.2 Final Core Audit Fixes - storage driver policy, snapshot relation binding, true Fisher-Yates HMAC_SHA256_FY_V1, proof/event hash separation, verification API, and GitHub Actions CI
|
2026-08-17 23:55:01 +07:00 |
|
Ochenstarik
|
0fb5fe3f8d
|
feat(core): Phase 1.1 hardening - Prisma persistence, FSM, immutable snapshots, unbiased HMAC_SHA256_FY_V1 randomizer, and audit proof
|
2026-08-17 23:44:51 +07:00 |
|
Ochenstarik
|
02920a8743
|
feat: initial commit - VK Giveaway Randomizer Phase 1
|
2026-08-17 23:34:49 +07:00 |
|