Jagd Apps Heidekreis – Portal, Nachsuche, Drohnenführer, Stöberhunde
Go to file
User 8384ad9432 security: port binding, invite token auth, cookie flags, rate limiting
- Docker: bind all backend/frontend ports to 127.0.0.1 only (was 0.0.0.0)
- Docker: add shared jagd-network; portal uses container names instead of host ports
- Fix: set-password endpoints now require valid invite token (drohnenfuehrer, stoeberhunde)
- Fix: auth cookie secure flag enabled in production
- Fix: password reset token no longer logged in production
- Add: inviteLimiter (10/15min) on set-password routes in all three apps
- Add: importUsers capped at 500 entries to prevent DoS
- Refactor: rename handler -> drohnenfuehrer/stoeberhundefuehrer across all apps
2026-05-03 10:15:03 +02:00
drohnenfuehrer security: port binding, invite token auth, cookie flags, rate limiting 2026-05-03 10:15:03 +02:00
nachsuche security: port binding, invite token auth, cookie flags, rate limiting 2026-05-03 10:15:03 +02:00
portal security: port binding, invite token auth, cookie flags, rate limiting 2026-05-03 10:15:03 +02:00
stoeberhunde security: port binding, invite token auth, cookie flags, rate limiting 2026-05-03 10:15:03 +02:00
.gitignore init: Jagd Apps Heidekreis – Portal, Nachsuche, Drohnenführer, Stöberhunde 2026-05-02 17:31:20 +02:00
jagd-apps.code-workspace init: Jagd Apps Heidekreis – Portal, Nachsuche, Drohnenführer, Stöberhunde 2026-05-02 17:31:20 +02:00