Matt 6f55fdf81f fix: batch 3 — webhook HMAC documentation + CSRF rate limiting ...

- Webhook HMAC: added consumer verification JSDoc with Node.js example using crypto.timingSafeEqual
- CSRF rate limiting: 20 requests/15min per IP on NextAuth /csrf endpoint
- Renamed withRateLimit to withPostRateLimit/withGetRateLimit for clarity
- 429 responses include Retry-After header

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-03-07 18:05:42 +01:00

..

auth

fix: batch 3 — webhook HMAC documentation + CSRF rate limiting

2026-03-07 18:05:42 +01:00

cron

feat: round finalization with ranking-based outcomes + award pool notifications

2026-03-03 19:14:41 +01:00

email

Apply full refactor updates plus pipeline/email UX confirmations

2026-02-14 15:26:42 +01:00

files/bulk-download

Apply full refactor updates plus pipeline/email UX confirmations

2026-02-14 15:26:42 +01:00

health

Comprehensive platform review: security fixes, query optimization, UI improvements, and code cleanup

2026-02-05 20:31:08 +01:00

live-voting/stream

fix: security hardening — block self-registration, SSE auth, audit logging fixes

2026-03-04 20:18:50 +01:00

storage/local

Apply full refactor updates plus pipeline/email UX confirmations

2026-02-14 15:26:42 +01:00

trpc/[trpc]

Add background filtering jobs, improved date picker, AI reasoning display

2026-02-03 19:48:41 +01:00