Security hardening - #207

Open

BentBr wants to merge 78 commits into

mainfrom

fix/security-hardening

Commits on Jun 11, 2026

feat(core): add AppConfig::is_production helper
BentBr
committed
efde7c5
fix(core): read status and failed_login_attempts from admin_users row
BentBr
committed
cf68e0c
fix(devops): correct clean-e2e script path
BentBr
committed
3b252ad
ci: raise backend coverage threshold to 70%
BentBr
committed
ec51358
feat(persistence): add admin_users lockout columns (status, failed_login_attempts)
BentBr
committed
7c1f02a
feat(persistence): add SQL identifier allowlist validator for dynamic queries
BentBr
committed
3f32bee
fix(persistence): validate and quote SQL identifiers in dynamic entity filters
BentBr
committed
74a1028
feat(persistence): persist admin user lockout state
BentBr
committed
b1bc76a

Commits on Jun 12, 2026

feat(api): add too_many_requests (429) response constructor
BentBr
committed
87c8c87
feat(api): add per-IP login rate limit helper
BentBr
committed
c98a023
feat(api): enforce account lockout and rate limiting on admin login
BentBr
committed
5973bfe
fix(api): drive CORS from config and fail closed on wildcard in production
BentBr
committed
44751ee
fix(workflow): add SSRF guard to URI adapters (production-gated)
BentBr
committed
a9bb207
fix(fe): render system-log email preview in a sandboxed iframe
BentBr
committed
123ed95
fix(workflow): harden SSRF guard against IPv4-mapped, DNS-rebinding, and redirect bypasses
BentBr
committed
c750428
test(fe): assert system-log email preview renders in a sandboxed iframe
BentBr
committed
d009591
chore: remove unused argon2 and jsonwebtoken direct deps
BentBr
committed
62024ca
ci: scope contents:write to the badge-publish job in coverage
BentBr
committed
96736cb
test(api): integration tests for admin login lockout

BentBr
and
claude
committed
6f7d53d
test(services): add update_lockout_state to AdminUserRepo mock
BentBr
committed
5a79bb0
test(core): cover config loader env parsing (50 tests)
BentBr
committed
b91cd6a
test(core): cover dynamic-entity validator branches
BentBr
committed
b9aa6dc
test(core): cover field-definition validation branches
BentBr
committed
73eb5ac
refactor(core): split validator_tests into focused submodules
BentBr
committed
596602d
refactor(core): split loader_tests into focused submodules
BentBr
committed
4aceacf
refactor(core): remove original test files superseded by split submodules
BentBr
committed
48bb207
refactor(core): split validation_tests into focused submodules
BentBr
committed
88c1882
test(core): cover dynamic-entity accessors (split into submodules)
BentBr
committed
c976692
test(core): cover entity-definition methods
BentBr
committed
13cea7f
fix(persistence): unify entity-view system fields into one canonical const
BentBr
committed
59c16fd
test(api): cover ApiResponse constructors and status mapping
BentBr
committed
30afd5a
test(api): cover query parsing, pagination, sort, filter
BentBr
committed
efc41ce
test(workflow): cover DSL program validation branches
BentBr
committed
20de77f
test(persistence): split api_key extended repo tests into submodules
BentBr
committed
e1a0e58
test(persistence): cover workflow_versioning_repository
BentBr
committed
868fcf4
test(persistence): cover entity_definition_versioning_repository
BentBr
committed
9ce76c1
test(persistence): cover generic EntityRepository (CRUD + versioning)
BentBr
committed
f8c9b4e
test(persistence): cover dynamic_entity_query_repository
BentBr
committed
f7b84a5
test(persistence): cover workflow_repository module methods
BentBr
committed
87cdeab
test(persistence): cover workflow_repository CRUD
BentBr
committed
6090c40
test(persistence): cover workflow_repository runs
BentBr
committed
c55bf04
test(persistence): cover dynamic_entity_repository module
BentBr
committed
135b851
test(persistence): extend admin_user_repository coverage
BentBr
committed
2d28456
test(persistence): fix clippy must_use lint in admin_user tests
BentBr
committed
c0001c8
test(persistence): extend api_key_repository coverage
BentBr
committed
42ef01b

Commits on Jun 13, 2026

Commits on Jun 14, 2026

Commits on Jun 15, 2026

Commits on Jun 17, 2026

chore: licence british
BentBr
committed
0687b67