Graham McIntire
631d03536e
Session Security Enhancements: - Add 30-minute inactivity timeout to UpdateSessionActivity plug - Automatic logout with user notification after inactivity - Session timeout check happens on every request - Graceful logout with flash message - Refactored for Credo compliance (reduced nesting depth) Security Documentation: - Create comprehensive SECURITY.md covering all security features - Document authentication, authorization, and encryption - List OWASP Top 10 mitigations - Include security checklist for developers - Document recent security fixes and improvements Verification: - Password reset already rate-limited (confirmed) - All 6,145 tests passing - Zero Credo issues - Zero security warnings Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| channels | ||
| components | ||
| controllers | ||
| helpers | ||
| live | ||
| plugs | ||
| endpoint.ex | ||
| gettext.ex | ||
| gettext_helpers.ex | ||
| permissions.ex | ||
| plug_exceptions.ex | ||
| router.ex | ||
| telemetry.ex | ||
| user_auth.ex | ||