Commit Graph

16 Commits

Author SHA1 Message Date
4c27fd6483 Harden auth login against brute-force and refresh security docs 2026-03-01 18:24:26 -03:00
1c57084ebf Hardcode CORS credentials disabled and remove env toggle 2026-03-01 17:16:13 -03:00
bfc89fe5ce Revert "Allow private-network CORS origins in development"
This reverts commit 1b2e0cb8af.
2026-03-01 17:12:06 -03:00
1b2e0cb8af Allow private-network CORS origins in development 2026-03-01 17:08:50 -03:00
0242e061c2 Harden auth and security controls with session auth and docs 2026-03-01 15:29:09 -03:00
c5423fc9c3 Stabilize API routing, CORS, and settings save behavior 2026-03-01 14:27:19 -03:00
3d280396ae Fix LAN API access and dev proxy routing 2026-03-01 14:08:48 -03:00
48cfc79b5f Fix LAN API base and development CORS regression 2026-03-01 13:56:25 -03:00
bdd97d1c62 Harden security controls from REPORT findings 2026-03-01 13:32:08 -03:00
c3f34b38b4 Fix authenticated media flows and upload preflight handling 2026-02-21 15:53:02 -03:00
1cb6bfee58 Harden settings read sanitization for invalid providers 2026-02-21 15:15:43 -03:00
c1a7011d71 frontend: apply bearer token to centralized API requests 2026-02-21 15:03:13 -03:00
b25e508a00 Fix frontend container app dir ownership for Vite 2026-02-21 14:49:23 -03:00
3cbad053cc Harden auth, redaction, upload size checks, and compose token requirements 2026-02-21 13:48:55 -03:00
4beab4bc09 Persist processing-log retention settings and wire cleanup defaults 2026-02-21 12:05:48 -03:00
6501841426 docs: complete repository technical documentation refresh 2026-02-21 11:27:44 -03:00