Graham McIntire
631d03536e
Session Security Enhancements: - Add 30-minute inactivity timeout to UpdateSessionActivity plug - Automatic logout with user notification after inactivity - Session timeout check happens on every request - Graceful logout with flash message - Refactored for Credo compliance (reduced nesting depth) Security Documentation: - Create comprehensive SECURITY.md covering all security features - Document authentication, authorization, and encryption - List OWASP Top 10 mitigations - Include security checklist for developers - Document recent security fixes and improvements Verification: - Password reset already rate-limited (confirmed) - All 6,145 tests passing - Zero Credo issues - Zero security warnings Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| gettext | ||
| mibs | ||
| profiles | ||
| proto | ||
| repo | ||
| static | ||