5 Commits

Include renames

Author	SHA1	Message	Date
bruno	2e2a33cef3	fix: corrige 6 bugs mineurs (BUG-035 a BUG-040)	2026-09-17 20:05:08 -04:00
bruno	162a5b4acc	fix(security): consolidation & securite phase 1 (#84, BUG-021 a BUG-034) ... - sanitizer XSS serveur (markdown + page de partage) [BUG-021/022] - rate-limit/lockout MFA [BUG-023] - isolation vaults par segments [BUG-024] - caps regex ReDoS [BUG-025] - SSRF webhooks + secrets externalises [BUG-026] - rotation/revocation des jetons [BUG-027] - politique de mot de passe + invalidation sessions [BUG-028] - verrous users.json [BUG-029] - IP reelle dans les audits [BUG-030] - rate-limit par compte [BUG-031] - symlinks hors vault ignores [BUG-032] - recherche simple via inverted index [BUG-033] - token en memoire + cookie HttpOnly, CSP durcie [BUG-034] Tests: pytest 961 passed / 6 skipped, ruff 0, mypy 0, frontend vert.	2026-09-13 10:51:42 -04:00
bruno	9dce341bc8	feat(ai): durcissement phase F (#79) - rate limit, redaction, OpenAPI/MCP, E2E	2026-09-11 21:56:50 -04:00
bruno	1673531b43	fix: resolve all CI lint and security issues ... - ruff: 602→0 errors (428 auto-fixed, pyproject.toml ignores for FastAPI patterns) - bandit: skip B310 (urllib for vault file access is intentional) - Fixed SIM118 (dict.keys()→dict), PERF102, SIM113, SIM117 - Created pyproject.toml with ruff + bandit config - 285 tests still pass	2026-07-24 10:38:44 -04:00
bruno	190f47f134	feat: Introduce a comprehensive authentication system, including user management, JWT handling, and initial frontend components with Docker support.	2026-03-23 15:44:37 -04:00