imc-vibe/backend/cmd/server
Christoph Haas 269fb6f53a Security fixes
1. Password reset tokens: use crypto/rand instead of math/rand
2. IP spoofing: only trust X-Forwarded-For from configured trusted proxies
3. Cleanup: purge failed login attempts older than 24 hours
4. JWT secret: validate minimum 32 character length on startup

Updated .env.example with TRUSTED_PROXIES setting
2026-03-23 01:09:26 +01:00
..
frontend.go first 2026-03-21 22:41:23 +01:00
main.go Security fixes 2026-03-23 01:09:26 +01:00