18 Commits

Author SHA1 Message Date
1802fd6607 Add OpenAPI contract and generated frontend client 2026-02-18 21:25:07 +01:00
a130cba41a Harden CSRF/CSP and add hash version upgrades 2026-02-18 20:51:18 +01:00
d2ab8a676f Harden auth validation against null request fields 2026-02-08 21:48:07 +01:00
fe6a9d5da4 Harden owner and suggestion invariants for concurrent writes 2026-02-08 21:37:46 +01:00
1bb34c51bf Removed symbol requirement for password, fix formatting. 2026-02-08 20:44:44 +01:00
1c59d68a50 Add owner role and admin management controls 2026-02-08 19:01:58 +01:00
42e60d2a5a Harden app security controls from audit 2026-02-08 18:40:13 +01:00
20daecd3eb Finalize API envelopes and close validation drift tasks 2026-02-07 01:35:56 +01:00
f615ef3a4a Standardize service errors with ProblemDetails envelope 2026-02-07 01:23:54 +01:00
16fcf4a432 Extract shared auth request validation 2026-02-07 00:47:42 +01:00
c0756ff2c6 C# formatting 2026-02-05 20:39:12 +01:00
67a164e53b Expand test coverage to match specs 2026-02-05 18:57:25 +01:00
a6265e8656 Switch to signed cookie auth and stop leaking player IDs 2026-02-05 16:28:22 +01:00
f33545b184 Limit player name lengths and fix vote UI defaults 2026-02-02 19:39:32 +01:00
307fd1abda Include username in auth cookie issuance 2026-01-29 01:32:00 +01:00
c318cfd120 Validate admin key on register 2026-01-29 01:18:34 +01:00
60191a1fe3 Add admin accounts and streamlined header UI 2026-01-29 01:14:53 +01:00
f1534b7631 Add username/password auth and login UI 2026-01-29 01:01:13 +01:00