SPARC

Make CORS allowed origins configurable via environment variable P1 agent-ready security small

#799 by AI-Manager was closed 2026-03-29 02:08:10 +00:00

Refuse to start with default JWT secret in non-development environments P1 agent-ready security small

#798 by AI-Manager was closed 2026-03-29 04:02:40 +00:00

2

Add rate limiting middleware to auth endpoints to prevent brute-force attacks P1 agent-ready security small

#785 by AI-Manager was closed 2026-03-29 01:14:43 +00:00

2

Move database credentials out of docker-compose.yml into .env / Docker secrets P1 agent-ready security small

#782 by AI-Manager was closed 2026-03-29 01:14:30 +00:00

2

Make CORS allowed origins configurable via environment variable P1 agent-ready security small

#781 by AI-Manager was closed 2026-03-29 01:14:27 +00:00

2

Refuse to start with default JWT secret in non-development environments P1 agent-ready security small

#780 by AI-Manager was closed 2026-03-29 01:14:23 +00:00

2

Add rate limiting middleware to auth endpoints to prevent brute-force attacks P1 agent-ready medium security

#760 by AI-Manager was closed 2026-03-28 22:04:18 +00:00 0 / 3

2

Replace hardcoded database credentials in docker-compose.yml with .env file reference P1 agent-ready security small

#757 by AI-Manager was closed 2026-03-28 22:04:08 +00:00 0 / 4

3

Make CORS allowed origins configurable via environment variable P1 agent-ready security small

#756 by AI-Manager was closed 2026-03-28 22:04:05 +00:00 0 / 4

2

Add startup check to refuse default JWT secret in non-development environments P1 agent-ready security small

#755 by AI-Manager was closed 2026-03-28 22:04:00 +00:00 0 / 3

3

Add rate limiting to /auth/login and /auth/register endpoints P1 agent-ready medium security

#739 by AI-Manager was closed 2026-03-28 18:03:41 +00:00 0 / 5

1

Remove plaintext database credentials from docker-compose.yml P1 agent-ready security small

#736 by AI-Manager was closed 2026-03-28 18:03:36 +00:00 0 / 4

1

Make CORS allowed origins configurable via environment variable P1 agent-ready security small

#735 by AI-Manager was closed 2026-03-28 18:03:35 +00:00 0 / 4

1

Refuse to start with default JWT secret in non-development environments P1 agent-ready security small

#734 by AI-Manager was closed 2026-03-28 18:03:33 +00:00 0 / 4

1

Refuse to start with default JWT secret in non-development environments P1 agent-ready security small

#733 by AI-Manager was closed 2026-03-28 17:24:52 +00:00 0 / 4

Security: Add rate limiting to /auth/login and /auth/register endpoints P1 agent-ready security small

#714 by AI-Manager was closed 2026-03-28 17:05:48 +00:00 0 / 4

1

Security: Remove hardcoded database credentials from docker-compose.yml P1 agent-ready security small

#711 by AI-Manager was closed 2026-03-28 17:04:54 +00:00 0 / 4

1

Security: Make CORS allowed origins configurable via environment variable P1 agent-ready security small

#710 by AI-Manager was closed 2026-03-28 17:04:53 +00:00 0 / 4

1

Security: Refuse to start with default JWT secret in non-dev environments P1 agent-ready security small

#709 by AI-Manager was closed 2026-03-28 17:04:52 +00:00 0 / 4

1

Add rate limiting to /auth/login and /auth/register endpoints P1 agent-ready security small

#688 by AI-Manager was closed 2026-03-28 16:03:31 +00:00

1