5 commits

Author	SHA1	Message	Date
senke	6a675565e1	feat(v0.13.3): complete - Polish Sécurité Avancée ... TASK-SECADV-001: WebAuthn/Passkeys (F022) - WebAuthn credential model, service, handler - Registration/authentication ceremony endpoints - CRUD operations (list, rename, delete passkeys) - Routes: GET/POST/PUT/DELETE /auth/passkeys/* TASK-SECADV-002: Configurable password policy (F015) - PasswordPolicyConfig with MinLength, MaxLength, RequireUpper/Lower/Number/Special - NewPasswordValidatorWithPolicy constructor - PasswordPolicyFromEnv() reads env vars (PASSWORD_MIN_LENGTH, etc.) - All character class checks now respect policy configuration TASK-SECADV-003: Géolocalisation connexions (F025) - GeoIPResolver interface + GeoIPService implementation - Country/city columns added to login_history table - LoginHistoryService.Record() performs GeoIP lookup - GetUserHistory returns geolocation data - GET /auth/login-history endpoint TASK-SECADV-004: Password expiration (F016) - password_changed_at column on users table - CheckPasswordExpiration() method on PasswordService - All password change/reset methods now set password_changed_at - NewPasswordServiceWithPolicy() supports expiration days config Migration: 971_security_advanced_v0133.sql Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-03-13 10:09:01 +01:00
senke	76d95ecfb4	incus deployement fully implemented, Makefile updated and make fmt ran	2026-01-13 19:47:57 +01:00
senke	02cfdd8f43	[FIX] PROD-009: Corriger validation mot de passe - ne rejeter que si exactement un mot commun	2026-01-04 01:44:18 +01:00
senke	616a0ebc9c	[BE-SEC-006] security: Implement comprehensive password strength validation ... - Enhanced PasswordValidator with additional security checks: * Maximum length validation (128 characters) * Common password detection (password, 123456, qwerty, etc.) * Repetitive pattern detection (aaaa, 1111, etc.) * Sequential pattern detection (1234, abcd, qwerty, etc.) - Added ValidatePasswordChange method to ensure new password is sufficiently different from old password (similarity check) - Updated PasswordService to use enhanced validator consistently - Replaced utils.ValidatePasswordStrength with validators.PasswordValidator - All password operations now use the same comprehensive validation rules Phase: PHASE-4 Priority: P1 Progress: 8/267 (3.0%)	2025-12-24 12:08:03 +01:00
okinrev	2425c15b09	adding initial backend API (Go)	2025-12-03 20:29:37 +01:00