Viktor Barzin 0a9a83507e Harden backend security: IDOR fix, error sanitization, rate limiter fallback, security headers ... - Fix task status IDOR by adding ownership check; suppress traceback/error in production - Passkey routes: return generic error messages for internal exceptions, keep ValueError for user-facing - JWT_SECRET and OIDC_CLIENT_ID: raise RuntimeError in production when using defaults - Rate limiter: add in-memory fallback counter when Redis is unavailable - Fix X-Forwarded-For IP spoofing with trusted_proxy_depth (rightmost-N selection) - Add SecurityHeadersMiddleware (X-Content-Type-Options, X-Frame-Options, CSP, conditional HSTS) - CORS: add PUT/DELETE methods for POI routes - POI input validation: field length and coordinate range constraints - QueryParameters: add min_sqm <= max_sqm validation		2026-02-08 19:42:30 +00:00
..
app.py	Harden backend security: IDOR fix, error sanitization, rate limiter fallback, security headers	2026-02-08 19:42:30 +00:00
audit_middleware.py	Add API rate limiting, metrics guard, and audit middleware	2026-02-08 00:45:43 +00:00
auth.py	Flatten repo structure: move crawler/ to root, remove vqa/ and immoweb/	2026-02-07 23:01:20 +00:00
config.py	Harden backend security: IDOR fix, error sanitization, rate limiter fallback, security headers	2026-02-08 19:42:30 +00:00
metrics.py	Flatten repo structure: move crawler/ to root, remove vqa/ and immoweb/	2026-02-07 23:01:20 +00:00
metrics_guard.py	Add API rate limiting, metrics guard, and audit middleware	2026-02-08 00:45:43 +00:00
passkey_routes.py	Harden backend security: IDOR fix, error sanitization, rate limiter fallback, security headers	2026-02-08 19:42:30 +00:00
poi_routes.py	Harden backend security: IDOR fix, error sanitization, rate limiter fallback, security headers	2026-02-08 19:42:30 +00:00
rate_limit_config.py	Harden backend security: IDOR fix, error sanitization, rate limiter fallback, security headers	2026-02-08 19:42:30 +00:00
rate_limiter.py	Harden backend security: IDOR fix, error sanitization, rate limiter fallback, security headers	2026-02-08 19:42:30 +00:00
security_headers.py	Harden backend security: IDOR fix, error sanitization, rate limiter fallback, security headers	2026-02-08 19:42:30 +00:00