mARTin-B78
f6c4a21215
Add an in-memory sliding-window rate limiter and wire it into signup, resend-verification, reset-password, and verify-email routes. Store password reset tokens as SHA-256 hashes, raise bcrypt cost to 12, and switch verification codes to a CSPRNG. Stop echoing calendar access/refresh tokens back to API clients, bound the weather cache size, return JSON 401s for unauthenticated API calls instead of an HTML redirect, and drop the dead mock login route. v1.113.0
52 lines
633 B
Plaintext
52 lines
633 B
Plaintext
# OS-specific files
|
|
.DS_Store
|
|
Thumbs.db
|
|
|
|
# Editor/IDE folders
|
|
.vscode/
|
|
.idea/
|
|
*.swp
|
|
|
|
# Python virtual environment
|
|
.venv/
|
|
|
|
# Sensitive data
|
|
Inspiration/
|
|
.env
|
|
.env.local
|
|
.env.production
|
|
.env.development
|
|
.env.docker
|
|
.env.docker.dev
|
|
.env.docker.local
|
|
|
|
# Logs and temp files
|
|
*.log
|
|
tmp/
|
|
data/
|
|
|
|
# Playwright
|
|
node_modules/
|
|
/test-results/
|
|
/playwright-report/
|
|
/blob-report/
|
|
/playwright/.cache/
|
|
/playwright/.auth/
|
|
|
|
# Development database
|
|
prisma/dev.db
|
|
prisma/dev.db-journal
|
|
|
|
# Next.js
|
|
.next/
|
|
|
|
certificates
|
|
|
|
# Design reference files (not tracked)
|
|
docs/design/
|
|
|
|
# Dokumentationen (nicht tracken)
|
|
APP_ERKLÄRUNG.md
|
|
.env.production.save
|
|
.env*.save
|