Commit Graph

52 Commits

Author SHA1 Message Date
Hamza-Ayed
5dd8fe46f3 Update: 2026-05-04 01:59:47 2026-05-04 01:59:47 +03:00
Hamza-Ayed
3976a5346b Update: 2026-05-04 01:57:45 2026-05-04 01:57:45 +03:00
Hamza-Ayed
87d6b8b1c0 Update: 2026-05-04 01:55:05 2026-05-04 01:55:05 +03:00
Hamza-Ayed
282f33ca3a Update: 2026-05-04 01:52:13 2026-05-04 01:52:13 +03:00
Hamza-Ayed
08106ac4ea Update: 2026-05-04 01:46:58 2026-05-04 01:46:58 +03:00
Hamza-Ayed
90f2f6f6e3 Update: 2026-05-04 01:33:55 2026-05-04 01:33:55 +03:00
Hamza-Ayed
79308d7f9b Update: 2026-05-04 00:48:53 2026-05-04 00:48:53 +03:00
Hamza-Ayed
5abc22dcd8 Update: 2026-05-04 00:37:13 2026-05-04 00:37:14 +03:00
Hamza-Ayed
e9cea98e95 Update: 2026-05-04 00:29:31 2026-05-04 00:29:31 +03:00
Hamza-Ayed
b4ac1e8775 Update: 2026-05-04 00:27:42 2026-05-04 00:27:42 +03:00
Hamza-Ayed
cd85fcf2bd Update: 2026-05-04 00:23:45 2026-05-04 00:23:45 +03:00
Hamza-Ayed
671db50f16 Update: 2026-05-04 00:13:56 2026-05-04 00:13:56 +03:00
Hamza-Ayed
8357add763 Update: 2026-05-04 00:09:02 2026-05-04 00:09:02 +03:00
Hamza-Ayed
b6db8da450 Update: 2026-05-03 23:57:27 2026-05-03 23:57:27 +03:00
Hamza-Ayed
bef134ea77 Update: 2026-05-03 23:08:56 2026-05-03 23:08:56 +03:00
Hamza-Ayed
87809ac893 Update: 2026-05-03 22:51:59 2026-05-03 22:51:59 +03:00
Hamza-Ayed
6d2c61497c Update: 2026-05-03 22:38:30 2026-05-03 22:38:30 +03:00
Hamza-Ayed
13bbc29e0e Update: 2026-05-03 22:35:31 2026-05-03 22:35:31 +03:00
Hamza-Ayed
2732229642 Update: 2026-05-03 22:26:56 2026-05-03 22:26:56 +03:00
Hamza-Ayed
ab9625839e Update: 2026-05-03 22:15:40 2026-05-03 22:15:40 +03:00
Hamza-Ayed
089a2b76c0 Update: 2026-05-03 21:58:11 2026-05-03 21:58:11 +03:00
Hamza-Ayed
e1d4917369 Update: 2026-05-03 21:37:02 2026-05-03 21:37:02 +03:00
Hamza-Ayed
ff8f525c76 Update: 2026-05-03 21:32:45 2026-05-03 21:32:45 +03:00
Hamza-Ayed
214d96ee8d Security Hardening: Phase 1-3 complete
- C1: Hash refresh tokens before DB storage (sha256)
- C2: Remove JWT_SECRET fallback, fail hard if missing
- H1: Enforce HTTP methods per route (405 on mismatch)
- H2: CORS with origin whitelist from CORS_ORIGIN env var
- H3: Redact sensitive fields (tokens, passwords) from logs
- M1: Build HmacMiddleware with replay attack prevention
- M2: Fix rate limiter race condition with flock LOCK_EX
- M3: Guard dd() — suppressed in production
- M4: Remove .env from git tracking, strengthen .gitignore
- I1: Add HSTS header (max-age=31536000)
2026-05-03 21:06:17 +03:00
Hamza-Ayed
b33513ebcf Update: 2026-05-03 20:56:55 2026-05-03 20:56:55 +03:00
Hamza-Ayed
8af74f0621 Update: 2026-05-03 20:51:50 2026-05-03 20:51:50 +03:00
Hamza-Ayed
b0e79fd214 Update: 2026-05-03 20:47:13 2026-05-03 20:47:13 +03:00
Hamza-Ayed
bc35319f3c Update: 2026-05-03 20:45:16 2026-05-03 20:45:16 +03:00
Hamza-Ayed
e2acce23c0 Fix case sensitivity in app folders 2026-05-03 20:33:29 +03:00
Hamza-Ayed
2c8ed7e742 Update: 2026-05-03 18:19:24 2026-05-03 18:19:24 +03:00
Hamza-Ayed
59d766c6d7 Update: 2026-05-03 18:15:49 2026-05-03 18:15:49 +03:00
Hamza-Ayed
0d458e8d81 Update: 2026-05-03 18:12:07 2026-05-03 18:12:07 +03:00
Hamza-Ayed
4b40b1185f Update: 2026-05-03 17:32:57 2026-05-03 17:32:57 +03:00
Hamza-Ayed
0488c17107 🚀 مُصادَق: تحديث برمجي جديد 2026-05-03 16:43 2026-05-03 16:43:46 +03:00
Hamza-Ayed
3aeb3220f1 🚀 مُصادَق: تحديث برمجي جديد 2026-05-03 14:50 2026-05-03 14:50:24 +03:00
Hamza-Ayed
31bb1bf565 🚀 مُصادَق: تحديث برمجي جديد 2026-05-03 14:27 2026-05-03 14:27:28 +03:00
Hamza-Ayed
cb69abe221 🚀 مُصادَق: تحديث برمجي جديد 2026-05-03 14:02 2026-05-03 14:02:18 +03:00
Hamza-Ayed
ea415e3a11 🚀 مُصادَق: تحديث برمجي جديد 2026-05-03 13:39 2026-05-03 13:39:05 +03:00
Hamza-Ayed
2de6a0adfd 🚀 مُصادَق: تحديث برمجي جديد 2026-05-03 13:19 2026-05-03 13:19:45 +03:00
Hamza-Ayed
cf68007ef1 🚀 مُصادَق: تحديث برمجي جديد 2026-05-03 03:15 2026-05-03 03:15:18 +03:00
Hamza-Ayed
392f6dbd9b 🚀 مُصادَق: تحديث برمجي جديد 2026-05-03 02:51 2026-05-03 02:51:50 +03:00
Hamza-Ayed
7b86fa717d 🚀 مُصادَق: تحديث برمجي جديد 2026-05-03 02:44 2026-05-03 02:44:02 +03:00
Hamza-Ayed
ce9f14c7a3 🚀 مُصادَق: تحديث برمجي جديد 2026-05-03 02:38 2026-05-03 02:38:54 +03:00
Hamza-Ayed
355fb45935 🚀 مُصادَق: تحديث برمجي جديد 2026-05-03 02:16 2026-05-03 02:16:47 +03:00
Hamza-Ayed
76a6957627 🚀 مُصادَق: تحديث برمجي جديد 2026-05-03 02:07 2026-05-03 02:07:24 +03:00
Hamza-Ayed
bb805279b2 🚀 مُصادَق: تحديث برمجي جديد 2026-05-03 01:53 2026-05-03 01:53:47 +03:00
Hamza-Ayed
faad0cbc8f 🚀 مُصادَق: تحديث برمجي جديد 2026-05-03 01:40 2026-05-03 01:40:01 +03:00
Hamza-Ayed
5100fd786e fix: switch API routing to query string for Nginx compatibility 2026-05-03 01:34:18 +03:00
Hamza-Ayed
bbfdabad2f 🚀 مُصادَق: تحديث برمجي جديد 2026-05-03 01:31 2026-05-03 01:31:38 +03:00
Hamza-Ayed
c009587d5a 🚀 مُصادَق: تحديث برمجي جديد 2026-05-03 01:11 2026-05-03 01:11:57 +03:00