Ochenstarik
|
b625d70e8e
|
fix(security): resolve pre-auth shared identity lockout with valid session cache (Task 16)
|
2026-08-22 23:31:42 +07:00 |
|
Ochenstarik
|
ef8360bd4b
|
fix(security): enforce pre-auth rate limit before session store lookup (Task 15)
|
2026-08-22 21:20:27 +07:00 |
|
Ochenstarik
|
8e39ce0cbd
|
fix(validation): Task 14 reject excludeDuplicateComments in API schemas and upgrade CI node-version to 22
|
2026-08-21 22:49:37 +07:00 |
|
Ochenstarik
|
6510ea2a04
|
fix(security): Task 13 enforce mandatory authentication for POST /api/posts/preview
|
2026-08-21 22:32:27 +07:00 |
|
Ochenstarik
|
76ab7d0e77
|
fix(security): Task 12 add pre-authentication rate limiting to protect session store from flood
|
2026-08-21 22:27:33 +07:00 |
|
Ochenstarik
|
906148813e
|
chore: Task 11 dead code cleanup and capability validation unification
|
2026-08-21 19:49:16 +07:00 |
|
Ochenstarik
|
1883a86402
|
fix(ui): Task 10 improve UI error handling, remove alerts and handle unauthenticated state
|
2026-08-21 19:45:30 +07:00 |
|
Ochenstarik
|
3feb0d5834
|
fix(storage): Task 09 ensure eligibleParticipantsCount parity between Memory and Prisma repository drivers
|
2026-08-21 19:37:41 +07:00 |
|
Ochenstarik
|
4e095553a1
|
test(prisma): Task 08 add Prisma integration test harness, separate vitest configs and update CI workflow
|
2026-08-21 19:35:07 +07:00 |
|
Ochenstarik
|
2da8b01b1b
|
fix(core): Task 07 resolve duplicate comments semantics, fix commentsCount merging, and maintain legacy snapshot hash compatibility
|
2026-08-21 19:31:01 +07:00 |
|
Ochenstarik
|
8741569817
|
feat(public): Task 06 implement public giveaway verification endpoint and page
|
2026-08-21 19:11:03 +07:00 |
|
Ochenstarik
|
1a27a10847
|
feat(security): Task 05 enforce CSRF validation and strict rate limiting on post preview route
|
2026-08-21 19:06:57 +07:00 |
|
Ochenstarik
|
4b8c6b1039
|
feat(api): Task 04 implement safe atomic snapshot unlock SNAPSHOT_LOCKED -> READY
|
2026-08-21 19:01:26 +07:00 |
|
Ochenstarik
|
fb6ae61628
|
feat(infra): Task 03 upgrade to Next.js 16 and React 19 resolving high security advisories
|
2026-08-21 18:42:40 +07:00 |
|
Ochenstarik
|
6f3fd44333
|
feat(security): Task 02 client identity and user-scoped rate limiting
|
2026-08-21 18:34:13 +07:00 |
|
Ochenstarik
|
92f6d19225
|
feat(auth): Task 01 add persistent OAuthTransaction and Session Prisma stores
|
2026-08-21 17:53:38 +07:00 |
|
Ochenstarik
|
b2888950cd
|
docs(report): update Phase 2.4 report with UNVERIFIED and migration details and fix test typechecks
|
2026-08-21 08:44:34 +07:00 |
|
Ochenstarik
|
3279f287fb
|
fix(snapshot): Phase 2.4.1 enforce atomic snapshot lock, single lock invariant and direct seed commitment binding
|
2026-08-20 18:23:48 +07:00 |
|
Ochenstarik
|
78151572bd
|
fix(draw): Phase 2.4 enforce seed pre-commit at snapshot lock to prevent grinding
|
2026-08-20 17:24:07 +07:00 |
|
Ochenstarik
|
9927e74421
|
fix(auth): Phase 2.3.1.1 truthful giveaway detail capability based on credential status
|
2026-08-18 15:03:23 +07:00 |
|
Ochenstarik
|
4e4370d6f1
|
fix(vk): Phase 2.3.1 derive effectiveCapabilities from actual resolved auth mode
|
2026-08-18 14:50:47 +07:00 |
|
Ochenstarik
|
1495067501
|
chore(tooling): add AI security review exporter
|
2026-08-18 14:46:09 +07:00 |
|