3 Commits

Author	SHA1	Message	Date
Kaj Kowalski	3e9e75e854	feat: implement comprehensive CSRF protection	2025-07-12 00:28:07 +02:00
Kaj Kowalski	fa7e815a3b	feat: complete tRPC integration and fix platform UI issues ... - Implement comprehensive tRPC setup with type-safe API - Create tRPC routers for dashboard, admin, and auth endpoints - Migrate frontend components to use tRPC client - Fix platform dashboard Settings button functionality - Add platform settings page with profile and security management - Create OpenAI API mocking infrastructure for cost-safe testing - Update tests to work with new tRPC architecture - Sync database schema to fix AIBatchRequest table errors	2025-07-12 00:27:57 +02:00
Kaj Kowalski	7cc5cad14f	security: enhance authentication rate limiting and add comprehensive security tests ... - Add rate limiting middleware for NextAuth login endpoints - Implement authRateLimitMiddleware for /api/auth/* routes - Add comprehensive security tests covering: - Rate limiter functionality (5 tests) - IP extraction from headers (5 tests) - Input validation and sanitization (10 tests) - Password strength requirements - XSS and SQL injection prevention - All 21 security tests passing - Rate limits configured: 5 login attempts per 15 minutes	2025-07-12 00:27:51 +02:00