chiappa 30c0604e49 fix: rotate CSRF token on session-id regeneration (SEC_REVIEW F40) 4 giorni fa
..
ApiClient 726d8642ce feat(M08): ui scaffold, OIDC + local admin auth, session, ApiClient 1 settimana fa
App f2a81ad611 fix: reject weak local-admin password hash at UI boot (SEC_REVIEW F37) 4 giorni fa
Auth 30c0604e49 fix: rotate CSRF token on session-id regeneration (SEC_REVIEW F40) 4 giorni fa
Http 193f6463a4 fix: drop CSP unsafe-inline/unsafe-eval via nonces + Alpine CSP build (SEC_REVIEW F24) 4 giorni fa
Logging 3a4026baf6 fix: log fingerprints, not raw identifiers, in auth flows (SEC_REVIEW F34) 4 giorni fa
SmokeTest.php d330d80b8a feat(M01): monorepo skeleton, toolchain, docker compose builds clean 1 settimana fa