5 commits

Author	SHA1	Message	Date
senke	4c0be12465	release(v0.902): Sentinel - PKCE OAuth, token encryption, redirect validation, CHAT_JWT_SECRET ... - PKCE (S256) in OAuth flow: code_verifier in oauth_states, code_challenge in auth URL - CryptoService: AES-256-GCM encryption for OAuth provider tokens at rest - OAuth redirect URL validated against OAUTH_ALLOWED_REDIRECT_DOMAINS - CHAT_JWT_SECRET must differ from JWT_SECRET in production - Migration script: cmd/tools/encrypt_oauth_tokens for existing tokens - Fixes: VEZA-SEC-003, VEZA-SEC-004, VEZA-SEC-009, VEZA-SEC-010	2026-02-26 19:49:15 +01:00
senke	6e204cc98a	feat(security): v0.901 Ironclad - fix 5 critical/high vulnerabilities ... - OAuth: use JWTService+SessionService, httpOnly cookies (VEZA-SEC-001) - Remove PasswordService.GenerateJWT (VEZA-SEC-002) - Hyperswitch webhook: mandatory verification, 500 if secret empty (VEZA-SEC-005) - Auth middleware: TokenBlacklist.IsBlacklisted check (VEZA-SEC-006) - Waveform: ValidateExecPath before exec (VEZA-SEC-007)	2026-02-26 19:34:45 +01:00
senke	6a1686aad8	feat(auth): add OAuth Spotify provider (A1)	2026-02-20 14:48:08 +01:00
senke	39f7967e1e	incus deployement fully implemented, Makefile updated and make fmt ran	2026-01-13 19:47:57 +01:00
senke	0950fa30aa	[T0-006] test(backend): Ajout tests pour frontend_log_handler ... - Tests complets pour frontend_log_handler.go (12 tests) - Tests couvrent NewFrontendLogHandler et ReceiveLog - Tests pour tous les niveaux de log (DEBUG, INFO, WARN, ERROR) - Tests pour gestion des erreurs et validation JSON - Couverture actuelle: 30.6% (objectif: 80%) Files: veza-backend-api/internal/handlers/frontend_log_handler_test.go VEZA_ROADMAP.json Hours: 16 estimated, 23 actual	2026-01-04 01:44:22 +01:00