tiny-forge

Files

T

alexei.dolgolyov 1f81ca9eb0 fix(docker-watcher): address final review findings

Security:
- Move config export behind auth middleware
- Validate OIDC callback token before storing in localStorage
- Use constant-time comparison for webhook secret
- Encrypt OIDC client secret at rest (like registry tokens)

Performance:
- Make TriggerDeploy async from HTTP handlers (return deploy ID
  immediately, run pipeline in background goroutine)

Robustness:
- Wrap api.ts res.json() in try/catch for non-JSON responses

i18n:
- Replace ~20 hardcoded English validation messages with $t() calls
- Localize ConfirmDialog cancel button, InstanceCard confirm titles,
  ProjectCard instance/instances pluralization
- Add validation keys to both en.json and ru.json

2026-03-28 00:14:53 +03:00

api

fix(docker-watcher): address final review findings

2026-03-28 00:14:53 +03:00

auth

feat(docker-watcher): phase 12 - hardening

2026-03-27 23:20:56 +03:00

config

feat(docker-watcher): phase 12 - hardening

2026-03-27 23:20:56 +03:00

crypto

feat(docker-watcher): phase 2 - crypto & config seed loader