Rogeeandrogee f719529d66 fix(security): harden auth and secret handling (HH-444) (#101) ...

* fix(security): harden auth and credential handling (HH-444)

* fix(security): address HH-444 review blockers

* fix(security): close remaining HH-444 review blockers

---------

Co-authored-by: Rogee <rogee@ipao.vip>

2026-08-22 15:45:06 +08:00

..

access_validator.go

H-338: close H-335 release blockers (#59)

2026-08-20 10:21:19 +08:00

benchmark_test.go_BAK

Reorganize repo: backend/, deploy/, docs/ layout + AGENTS.md

2026-07-07 14:44:12 +08:00

coverage2_test.go

test: improve backend unit coverage

2026-08-04 12:26:25 +08:00

coverage3_test.go

H-300: wire Captain Skills into Web runtime (#48)

2026-08-19 07:08:14 +08:00

coverage4_test.go

test: improve backend unit coverage

2026-08-04 12:26:25 +08:00

coverage5_test.go

test: improve backend unit coverage

2026-08-04 12:26:25 +08:00

coverage_test.go

HH-437: harden production auth and tenant authorization (#84)

2026-08-21 19:13:10 +08:00

jwt_test.go_BAK

Reorganize repo: backend/, deploy/, docs/ layout + AGENTS.md

2026-07-07 14:44:12 +08:00

jwt.go

fix(security): harden auth and secret handling (HH-444) (#101)

2026-08-22 15:45:06 +08:00

oidc_test.go

H-300: wire Captain Skills into Web runtime (#48)

2026-08-19 07:08:14 +08:00

oidc.go

fix(security): harden auth and secret handling (HH-444) (#101)

2026-08-22 15:45:06 +08:00

permission.go

Reorganize repo: backend/, deploy/, docs/ layout + AGENTS.md

2026-07-07 14:44:12 +08:00

platform_auth.go

H-300: wire Captain Skills into Web runtime (#48)

2026-08-19 07:08:14 +08:00

policy_test.go_BAK

Reorganize repo: backend/, deploy/, docs/ layout + AGENTS.md

2026-07-07 14:44:12 +08:00

policy.go

H-263 restore PostgreSQL E2E coverage (#41)

2026-08-18 00:55:45 +08:00

refresh_store_test.go

H-338: close H-335 release blockers (#59)

2026-08-20 10:21:19 +08:00

refresh_store_test.go_BAK

Reorganize repo: backend/, deploy/, docs/ layout + AGENTS.md

2026-07-07 14:44:12 +08:00

refresh_store.go

fix(security): harden auth and secret handling (HH-444) (#101)

2026-08-22 15:45:06 +08:00

security_hardening_test.go

fix(security): harden auth and secret handling (HH-444) (#101)

2026-08-22 15:45:06 +08:00

session.go

H-300: wire Captain Skills into Web runtime (#48)

2026-08-19 07:08:14 +08:00

sso_middleware_test.go

H-300: wire Captain Skills into Web runtime (#48)

2026-08-19 07:08:14 +08:00

sso_middleware.go

refactor: 移除 SAML/LDAP/MFA 登录方式，仅保留本地账号密码和 OIDC

2026-07-29 19:03:04 +08:00

sso_middleware.go_BAK

Reorganize repo: backend/, deploy/, docs/ layout + AGENTS.md

2026-07-07 14:44:12 +08:00

sso_middleware.go_BAK2

Reorganize repo: backend/, deploy/, docs/ layout + AGENTS.md

2026-07-07 14:44:12 +08:00

sso_session_store.go

refactor: 移除 SAML/LDAP/MFA 登录方式，仅保留本地账号密码和 OIDC

2026-07-29 19:03:04 +08:00

sso_session_store.go_BAK

Reorganize repo: backend/, deploy/, docs/ layout + AGENTS.md

2026-07-07 14:44:12 +08:00

webhook_registry.go

Reorganize repo: backend/, deploy/, docs/ layout + AGENTS.md

2026-07-07 14:44:12 +08:00

ws_ticket.go

fix(security): harden auth and secret handling (HH-444) (#101)

2026-08-22 15:45:06 +08:00