hzhang 1a5a3ed1b1 Merge fix/security-audit: RBAC/API-key-hash/cookie hardening

2026-06-01 09:23:35 +01:00

..

__init__.py

refactor: split monolithic main.py into FastAPI routers (v0.2.0)

2026-02-23 15:14:46 +00:00

auth.py

fix(projects): perm-gate create + apikey-via-Bearer + introspect with apikey

2026-05-24 22:09:34 +01:00

calendar.py

fix(calendar): /agent/status idempotent + 409 on bad transition

2026-05-22 22:46:30 +01:00

comments.py

fix(security): RBAC on legacy create endpoints, hashed API keys, hardening

2026-05-31 20:16:11 +01:00

essentials.py

feat: switch backend indexing to code-first identifiers

2026-04-03 16:25:11 +00:00

knowledge.py

feat(knowledge-base): KnowledgeBase feature — models, CRUD API, RBAC

2026-05-31 15:03:14 +01:00

meetings.py

feat: switch backend indexing to code-first identifiers

2026-04-03 16:25:11 +00:00

milestone_actions.py

feat: switch backend indexing to code-first identifiers

2026-04-03 16:25:11 +00:00

milestones.py

feat: switch backend indexing to code-first identifiers

2026-04-03 16:25:11 +00:00

misc.py

fix(security): RBAC on legacy create endpoints, hashed API keys, hardening

2026-05-31 20:16:11 +01:00

monitor.py

feat: add discord wakeup test endpoint

2026-04-04 21:03:48 +00:00

oidc.py

feat(backend)!: kill AbstractWizard, env-driven config + hf-cli

2026-05-24 19:01:37 +01:00

projects.py

fix(projects): perm-gate create + apikey-via-Bearer + introspect with apikey

2026-05-24 22:09:34 +01:00

proposals.py

feat: switch backend indexing to code-first identifiers

2026-04-03 16:25:11 +00:00

proposes.py

feat: switch backend indexing to code-first identifiers

2026-04-03 16:25:11 +00:00

roles.py

feat(users): switch account management to single-role model

2026-03-21 08:44:19 +00:00

schedule_type_special_slot.py

feat(schedule_type): minute-precision windows + variable maintenance length

2026-05-22 20:18:21 +01:00

schedule_type.py

feat(schedule_type): minute-precision windows + variable maintenance length

2026-05-22 20:18:21 +01:00

tasks.py

fix(security): close critical auth/SSRF/RBAC holes

2026-05-16 16:53:14 +01:00

users.py

fix(security): RBAC on legacy create endpoints, hashed API keys, hardening

2026-05-31 20:16:11 +01:00

webhooks.py

fix(security): close critical auth/SSRF/RBAC holes

2026-05-16 16:53:14 +01:00