Graham McIntire 631d03536e security: add session inactivity timeout and comprehensive security documentation ... Session Security Enhancements: - Add 30-minute inactivity timeout to UpdateSessionActivity plug - Automatic logout with user notification after inactivity - Session timeout check happens on every request - Graceful logout with flash message - Refactored for Credo compliance (reduced nesting depth) Security Documentation: - Create comprehensive SECURITY.md covering all security features - Document authentication, authorization, and encryption - List OWASP Top 10 mitigations - Include security checklist for developers - Document recent security fixes and improvements Verification: - Password reset already rate-limited (confirmed) - All 6,145 tests passing - Zero Credo issues - Zero security warnings Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>		2026-02-08 10:47:44 -06:00
..
api_auth.ex	refactor: use API token auth for profile imports instead of session cookies	2026-01-18 09:30:21 -06:00
capture_timezone.ex	Use detected timezone from session in user registration	2026-02-01 12:18:33 -06:00
check_policy_consent.ex	gdpr consent tracking	2026-01-29 11:12:35 -06:00
detect_eu_user.ex	snmp v3 support	2026-02-04 12:02:38 -06:00
mobile_auth.ex	Add comprehensive Dialyzer type specifications	2026-01-17 10:52:02 -06:00
rate_limit.ex	update hammer	2026-02-08 10:08:31 -06:00
remote_ip_logger.ex	nif ci fixes and dialyzer fixes	2026-01-30 12:38:50 -06:00
security_headers.ex	add security headers	2026-01-29 10:33:24 -06:00
update_session_activity.ex	security: add session inactivity timeout and comprehensive security documentation	2026-02-08 10:47:44 -06:00