senke 6823e5a30d release(v0.902): Sentinel - PKCE OAuth, token encryption, redirect validation, CHAT_JWT_SECRET ... - PKCE (S256) in OAuth flow: code_verifier in oauth_states, code_challenge in auth URL - CryptoService: AES-256-GCM encryption for OAuth provider tokens at rest - OAuth redirect URL validated against OAUTH_ALLOWED_REDIRECT_DOMAINS - CHAT_JWT_SECRET must differ from JWT_SECRET in production - Migration script: cmd/tools/encrypt_oauth_tokens for existing tokens - Fixes: VEZA-SEC-003, VEZA-SEC-004, VEZA-SEC-009, VEZA-SEC-010		2026-02-26 19:49:15 +01:00
..
api	feat(v0.802): frontend Cloud/Gear, MSW, docs, scope v0.803, archive	2026-02-25 14:00:58 +01:00
backup	incus deployement fully implemented, Makefile updated and make fmt ran	2026-01-13 19:47:57 +01:00
generate-config-docs	adding initial backend API (Go)	2025-12-03 20:29:37 +01:00
migrate_tool	chore(dev): add lab migration and run scripts	2025-12-07 14:27:51 +01:00
tools	release(v0.902): Sentinel - PKCE OAuth, token encryption, redirect validation, CHAT_JWT_SECRET	2026-02-26 19:49:15 +01:00