Commit Graph

19 Commits

Author SHA1 Message Date
a130cba41a Harden CSRF/CSP and add hash version upgrades 2026-02-18 20:51:18 +01:00
3c7f3d2114 Add event-driven state sync with ETag optimization 2026-02-18 19:58:57 +01:00
97f1b30b75 Formatting and loca 2026-02-08 18:51:01 +01:00
42e60d2a5a Harden app security controls from audit 2026-02-08 18:40:13 +01:00
5b06e279f3 Add analyzer and frontend lint guardrails 2026-02-07 02:12:00 +01:00
20daecd3eb Finalize API envelopes and close validation drift tasks 2026-02-07 01:35:56 +01:00
f615ef3a4a Standardize service errors with ProblemDetails envelope 2026-02-07 01:23:54 +01:00
81c04e0866 Refactor phase reads to pure lookups and align admin docs 2026-02-07 00:36:04 +01:00
c0756ff2c6 C# formatting 2026-02-05 20:39:12 +01:00
b48723d48f Use phase filters for suggestions; allow joker edge 2026-02-05 17:17:38 +01:00
e3d4e2e687 Enforce phase for suggestions with joker allowance 2026-02-05 17:15:30 +01:00
ffbf4aa05a Add phase requirement filter for vote/results endpoints 2026-02-05 17:13:09 +01:00
8176940d18 Centralize admin auth with endpoint filter 2026-02-05 17:11:17 +01:00
c03cee1777 Sign out invalid auth cookies when player no longer exists 2026-02-05 17:09:58 +01:00
a6265e8656 Switch to signed cookie auth and stop leaking player IDs 2026-02-05 16:28:22 +01:00
307fd1abda Include username in auth cookie issuance 2026-01-29 01:32:00 +01:00
f1534b7631 Add username/password auth and login UI 2026-01-29 01:01:13 +01:00
e15dd02228 Honor forwarded proto and scope cookie to base path to prevent new player cookies 2026-01-28 20:08:08 +01:00
9363b029df Refactor backend into structured endpoints, contracts, and middleware 2026-01-28 17:05:39 +01:00