bruno 162a5b4acc fix(security): consolidation & securite phase 1 (#84, BUG-021 a BUG-034) ...

- sanitizer XSS serveur (markdown + page de partage) [BUG-021/022]
- rate-limit/lockout MFA [BUG-023]
- isolation vaults par segments [BUG-024]
- caps regex ReDoS [BUG-025]
- SSRF webhooks + secrets externalises [BUG-026]
- rotation/revocation des jetons [BUG-027]
- politique de mot de passe + invalidation sessions [BUG-028]
- verrous users.json [BUG-029]
- IP reelle dans les audits [BUG-030]
- rate-limit par compte [BUG-031]
- symlinks hors vault ignores [BUG-032]
- recherche simple via inverted index [BUG-033]
- token en memoire + cookie HttpOnly, CSP durcie [BUG-034]

Tests: pytest 961 passed / 6 skipped, ruff 0, mypy 0, frontend vert.

2026-09-13 10:51:42 -04:00

..

__init__.py

feat: Introduce a comprehensive authentication system, including user management, JWT handling, and initial frontend components with Docker support.

2026-03-23 15:44:37 -04:00

jwt_handler.py

fix(security): consolidation & securite phase 1 (#84, BUG-021 a BUG-034)

2026-09-13 10:51:42 -04:00

mfa.py

chore(lint): ruff --fix sur le backend (cleanup pré-existant)

2026-09-07 09:01:40 -04:00

middleware.py

fix(security): consolidation & securite phase 1 (#84, BUG-021 a BUG-034)

2026-09-13 10:51:42 -04:00

password.py

fix(security): consolidation & securite phase 1 (#84, BUG-021 a BUG-034)

2026-09-13 10:51:42 -04:00

router.py

fix(security): consolidation & securite phase 1 (#84, BUG-021 a BUG-034)

2026-09-13 10:51:42 -04:00

user_store.py

fix(security): consolidation & securite phase 1 (#84, BUG-021 a BUG-034)

2026-09-13 10:51:42 -04:00

webauthn_mfa.py

feat(mfa): #64 WebAuthn complet — enregistrement/clé/verify login + gestion clés dans Sécurité (backend+frontend+i18n+tests)

2026-09-07 23:55:35 -04:00