Viktor Barzin 0a9a83507e Harden backend security: IDOR fix, error sanitization, rate limiter fallback, security headers ... - Fix task status IDOR by adding ownership check; suppress traceback/error in production - Passkey routes: return generic error messages for internal exceptions, keep ValueError for user-facing - JWT_SECRET and OIDC_CLIENT_ID: raise RuntimeError in production when using defaults - Rate limiter: add in-memory fallback counter when Redis is unavailable - Fix X-Forwarded-For IP spoofing with trusted_proxy_depth (rightmost-N selection) - Add SecurityHeadersMiddleware (X-Content-Type-Options, X-Frame-Options, CSP, conditional HSTS) - CORS: add PUT/DELETE methods for POI routes - POI input validation: field length and coordinate range constraints - QueryParameters: add min_sqm <= max_sqm validation		2026-02-08 19:42:30 +00:00
..
__init__.py	Flatten repo structure: move crawler/ to root, remove vqa/ and immoweb/	2026-02-07 23:01:20 +00:00
listing.py	Harden backend security: IDOR fix, error sanitization, rate limiter fallback, security headers	2026-02-08 19:42:30 +00:00
passkey_credential.py	Flatten repo structure: move crawler/ to root, remove vqa/ and immoweb/	2026-02-07 23:01:20 +00:00
poi.py	Add POI and POIDistance data models with migration	2026-02-08 13:13:05 +00:00
poi_distance.py	Add POI and POIDistance data models with migration	2026-02-08 13:13:05 +00:00
user.py	Run alembic migrations on startup, fix User model, add POI travel sorting and streaming options	2026-02-08 18:50:13 +00:00