kyle 934464bf8e security: add helmet, rate limiting, webhook auth, fix token storage, restrict hard deletes ...

- Add helmet for HTTP security headers (CSP, HSTS, X-Frame-Options, etc.)
- Add @nestjs/throttler for rate limiting (100 req/60s per IP)
- Add shared secret validation on Signal webhook endpoint
- Remove JWT token from localStorage, use Auth0 SDK memory cache
  with async getAccessTokenSilently() in API interceptor
- Restrict hard delete (?hard=true) to ADMINISTRATOR role in service layer
- Replace exposed Anthropic API key with placeholder in .env

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

2026-02-04 18:30:14 +01:00

..

abilities.ts

feat: comprehensive update with Signal, Copilot, themes, and PDF features

2026-02-01 19:30:41 +01:00

api.ts

security: add helmet, rate limiting, webhook auth, fix token storage, restrict hard deletes

2026-02-04 18:30:14 +01:00

errorHandler.ts

Major Enhancement: NestJS Migration + CASL Authorization + Error Handling

2026-01-31 08:50:25 +01:00

utils.ts

Major Enhancement: NestJS Migration + CASL Authorization + Error Handling

2026-01-31 08:50:25 +01:00