d58a4e1
security: implement audit fixes - RBAC gaps, DB rate limiter, password policy, security headers
2026-06-24T11:24:56+00:00
Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>
Files
- api/.env.example (api)
- api/config/routes.php (api)
- api/config/security.php (security)
- api/controller/auth/AuthController.php (api)
- api/controller/security/InvitationController.php (api)
- api/controller/security/PasswordResetController.php (api)
- api/controller/security/ProfileController.php (api)
- api/docs/openapi/openapi.v1.json (api)
- api/language/de-de/security/messages.php (api)
- api/language/en-gb/security/messages.php (api)
- api/language/es-es/security/messages.php (api)
- api/language/fr-fr/security/messages.php (api)
- api/language/pt-br/security/messages.php (api)
- api/language/ru-ru/security/messages.php (api)
- api/language/zh-cn/security/messages.php (api)
- api/system/library/app.php (api)
- api/system/library/database/migration/MigrationManager.php (migration)
- api/system/library/database/migration/RateLimitsMigration.php (migration)
- api/system/library/security/DatabaseRateLimiter.php (api)
- api/system/library/security/LoginRateLimiter.php (api)
- api/system/library/security/RateLimiterInterface.php (api)
- api/system/library/service/AuthService.php (api)
- api/system/library/service/PasswordResetService.php (api)
- web/DEPLOY_HASH (web)
- web/install.php (installer)
- web/robots.txt (web)
- api/.env.example (api)
- api/config/routes.php (api)
- api/config/security.php (security)
- api/controller/auth/AuthController.php (api)
- api/controller/security/InvitationController.php (api)
- api/controller/security/PasswordResetController.php (api)
- api/controller/security/ProfileController.php (api)
- api/docs/openapi/openapi.v1.json (api)
- api/language/de-de/security/messages.php (api)
- api/language/en-gb/security/messages.php (api)
- api/language/es-es/security/messages.php (api)
- api/language/fr-fr/security/messages.php (api)
- api/language/pt-br/security/messages.php (api)
- api/language/ru-ru/security/messages.php (api)
- api/language/zh-cn/security/messages.php (api)
- api/system/library/app.php (api)
- api/system/library/database/migration/MigrationManager.php (migration)
- api/system/library/database/migration/RateLimitsMigration.php (migration)
- api/system/library/security/DatabaseRateLimiter.php (api)
- api/system/library/security/LoginRateLimiter.php (api)
- api/system/library/security/RateLimiterInterface.php (api)
- api/system/library/service/AuthService.php (api)
- api/system/library/service/PasswordResetService.php (api)
- web/DEPLOY_HASH (web)
- web/install.php (installer)
- web/robots.txt (web)