2 Commits

Author	SHA1	Message	Date
alexei.dolgolyov	98ee2bcd9a	feat: auth system hardening with token revocation, password management, and error sanitization ... - Add token revocation with in-memory blacklist and periodic cleanup (SEC-M1) - Add POST /api/auth/logout endpoint - Fix OIDC auth_token cookie to HttpOnly with exchange endpoint (SEC-H3) - Add password complexity validation (min 8 chars) (SEC-M2) - Prevent admin self-deletion (SEC-M3) - Add PUT /api/auth/users/{uid} for role/email updates (FUNC-M1) - Add PUT /api/auth/users/{uid}/password for password changes (FUNC-H1) - Sanitize error messages in auth handlers (SEC-M4)	2026-04-04 12:43:45 +03:00
alexei.dolgolyov	32de5b26a8	feat(docker-watcher): phase 12 - hardening ... Blue-green zero-downtime deploys, promote flow validation. Dual auth: local (bcrypt + JWT) and OAuth2/OIDC (any provider). Auth middleware, login page, auth settings UI. Structured logging (slog JSON), config export to YAML. Graceful shutdown with deploy draining. Multi-stage Dockerfile and production docker-compose.yml. Swap phase order: Volumes & Env before UI Polish.	2026-03-27 23:20:56 +03:00