No description
Find a file
Arlind 29b30b27e6 fix(auth): strengthen admin temp-password entropy to 128 bits
generateTempPassword() used randomBytes(4) — 32 bits behind a known
'Bifrost-' prefix — for a directly-usable login password set by the admin
reset action. Brute-forceable. Bump to randomBytes(16) (128 bits) base64url.
Flagged by automated security review.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-06-17 15:57:14 +02:00
.claude chore: update local Claude Code permission allowlist 2026-06-10 17:19:23 +02:00
content feat: database schema, migrations, and seed data 2026-04-18 22:43:16 +02:00
deploy chore(deploy): align deploy artifacts to the target server's conventions 2026-06-17 13:16:57 +02:00
design chore: add Innofounder logo to public, wire to home page 2026-04-19 20:36:54 +02:00
migrations feat(roadmap): add planned status 2026-06-10 11:30:06 +02:00
public chore: add Innofounder logo to public, wire to home page 2026-04-19 20:36:54 +02:00
scripts fix(deploy): non-interactive restart in deploy.sh; restart-only sudoers rule 2026-06-17 15:55:38 +02:00
src fix(auth): strengthen admin temp-password entropy to 128 bits 2026-06-17 15:57:14 +02:00
tests feat(events): event photo upload + photo-as-background hero card 2026-06-10 17:18:23 +02:00
.env.example feat: database schema, migrations, and seed data 2026-04-18 22:43:16 +02:00
.env.production.example chore(deploy): align deploy artifacts to the target server's conventions 2026-06-17 13:16:57 +02:00
.gitignore feat(deploy): nginx reverse-proxy deploy setup for bifrost-portal.fenja.ai 2026-06-17 12:54:35 +02:00
astro.config.mjs feat: database schema, migrations, and seed data 2026-04-18 22:43:16 +02:00
CLAUDE.md wip: scaffold and index before style-guide 2026-04-18 16:09:49 +02:00
DECISIONS.md docs: document decisions D-15 through D-18 2026-04-19 20:32:09 +02:00
DEPLOY.md fix(deploy): non-interactive restart in deploy.sh; restart-only sudoers rule 2026-06-17 15:55:38 +02:00
HANDOVER.md docs: HANDOVER.md — build summary and next steps 2026-04-18 22:54:48 +02:00
KNOWN_ISSUES.md feat(db): add migration 0003 for council portal schema 2026-05-11 14:39:07 +02:00
package.json fix(deploy): use pnpm 11 allowBuilds key; drop dead package.json pnpm field 2026-06-17 15:07:39 +02:00
pnpm-lock.yaml feat: database schema, migrations, and seed data 2026-04-18 22:43:16 +02:00
pnpm-workspace.yaml fix(deploy): use pnpm 11 allowBuilds key; drop dead package.json pnpm field 2026-06-17 15:07:39 +02:00
SPEC.md feat(events): event photo upload + photo-as-background hero card 2026-06-10 17:18:23 +02:00
todo.md docs: capture deferred home-page features in todo.md 2026-05-11 17:04:40 +02:00
tsconfig.json wip: scaffold and index before style-guide 2026-04-18 16:09:49 +02:00
vitest.config.ts test: vitest suite — pulse status, vote uniqueness, home route 2026-05-11 14:45:55 +02:00