imc-vibe/backend/internal
Christoph Haas 269fb6f53a Security fixes
1. Password reset tokens: use crypto/rand instead of math/rand
2. IP spoofing: only trust X-Forwarded-For from configured trusted proxies
3. Cleanup: purge failed login attempts older than 24 hours
4. JWT secret: validate minimum 32 character length on startup

Updated .env.example with TRUSTED_PROXIES setting
2026-03-23 01:09:26 +01:00
..
api Security fixes 2026-03-23 01:09:26 +01:00
auth Add comprehensive human-readable comments to all Go files 2026-03-22 22:43:41 +01:00
config Security fixes 2026-03-23 01:09:26 +01:00
db Sort domains alphabetically 2026-03-23 00:11:03 +01:00
mail Security fixes 2026-03-23 01:09:26 +01:00