Commit Graph
14 Commits
Author SHA1 Message Date
MOHandClaude Sonnet 4.6 f490133345 Harden security, fix rate-limiting, and rename proxy
CI / quality (push) Has been cancelled
- Move admin login lockout from client cookie to AppConfig (DB), keyed
  by hashed client IP — clearing browser cookies no longer bypasses it
- Replace rate-limit $transaction (TOCTOU) with atomic SQL
  INSERT...ON CONFLICT...RETURNING; add stale-entry cleanup on each
  submission to prevent table bloat
- Add 5 s module-level cache for middleware runtime state fetch, reducing
  per-request DB roundtrips
- Rename middleware.ts → proxy.ts to resolve Next.js 16 deprecation
  warning; update test import accordingly
- Require ADMIN_PASSWORD, ADMIN_AUTH_SECRET, ADMIN_BASIC_AUTH_USER, and
  ADMIN_BASIC_AUTH_PASS in docker-compose.yml (:? syntax) — startup
  fails loudly instead of using placeholder defaults
- Add set -e and informative echo lines to Dockerfile CMD for clearer
  startup failure attribution
- Export requireAdminAuth() from lib/admin-auth for centralised use in
  admin pages
- Add CLAUDE.md with architecture notes and working rules

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-03-17 22:05:50 +01:00
MOH 635d54cb0e Use internal origin for runtime locale state
CI / quality (push) Waiting to run
2026-03-15 08:33:27 +01:00
MOH c18128c965 Fix runtime default locale resolution
CI / quality (push) Waiting to run
2026-03-15 06:02:27 +01:00
MOH 27df4ad2fe Unify dynamic locale routing
CI / quality (push) Waiting to run
2026-03-15 05:12:33 +01:00
MOH 3eb9238268 moh/admin-portfolio-ux-improvements
CI / quality (push) Waiting to run
2026-03-15 04:42:09 +01:00
MOH 50c3f5cce9 Fix maintenance redirects and admin host detection 2026-03-15 04:33:07 +01:00
MOH 5d3f77962a Add admin site settings sections and locale defaults 2026-03-15 04:06:33 +01:00
MOH 7956b073e9 Refactor portfolio admin and views 2026-03-11 17:46:35 +01:00
MOH 77cc9dca87 Add Sonner-based notifications and UX polish 2026-03-10 17:43:26 +01:00
MOH 5ca4819bcb Add SMTP admin settings and contact form delivery 2026-03-08 06:27:09 +01:00
MOH 0c2b67e378 Refactor site header, heroes, and design system 2026-03-08 00:29:51 +01:00
MOH cd6ec7fa78 Fix localized SEO template parsing
CI / quality (push) Waiting to run
2026-03-07 18:54:23 +01:00
MOH f259dfc6bd Add SEO settings and root admin save flows
CI / quality (push) Waiting to run
2026-03-07 18:48:01 +01:00
MOH ea64373853 Implement portfolio admin management 2026-03-07 16:06:20 +01:00