Commit graph

6 commits

Author SHA1 Message Date
Ochenstarik
7c5bf641cd feat(auth): Phase 2.2 VK ID OAuth 2.1 Authentication - PKCE flow, single-use state, encrypted token vault, HttpOnly session, /api/auth endpoints, UI badge, and comprehensive security tests 2026-08-18 02:45:09 +07:00
Ochenstarik
3f795e23fe feat(core): Phase 1.4.1 Final Race & Payload Fix - atomic conditional transition in saveParticipants, summary-only POST /participants response, and 100k payload regression & concurrency race tests 2026-08-18 02:02:35 +07:00
Ochenstarik
50973b4f85 feat(core): Phase 1.4 Production Hardening - double draw atomic protection, snapshot concurrency safety, Zod API validation, payload scalability & pagination, provider safety, normalized errors, idempotency, rate limiting, and 20 concurrent draw integration tests 2026-08-18 01:54:35 +07:00
Ochenstarik
26e82fcf8d feat(core): Phase 1.3 Public Verification Integrity - drawId persistence, real participant snapshot and rules recalculation, reserve winners check, auditEventHash verification, strict snapshot lookup, and anti-tampering test suite 2026-08-18 00:15:30 +07:00
Ochenstarik
1bc6650041 feat(core): Phase 1.2 Final Core Audit Fixes - storage driver policy, snapshot relation binding, true Fisher-Yates HMAC_SHA256_FY_V1, proof/event hash separation, verification API, and GitHub Actions CI 2026-08-17 23:55:01 +07:00
Ochenstarik
0fb5fe3f8d feat(core): Phase 1.1 hardening - Prisma persistence, FSM, immutable snapshots, unbiased HMAC_SHA256_FY_V1 randomizer, and audit proof 2026-08-17 23:44:51 +07:00