4 Commits

Include renames

Author	SHA1	Message	Date
Hein	8a94d884e7	fix(security): verify passwords, bind row-security args, fail closed on panic ... Verify bcrypt passwords in Direct mode and the shipped procedures, hash on register/reset, ignore client-supplied roles and level at registration and drop the password from the jwt_login payload. Legacy cleartext upgrade is opt-in. Row security templates now bind the user as a parameter, validate identifiers, attach via common.SelectQuery and fail the request if the filter cannot be attached. ApplyColumnSecurity and GetRowSecurityTemplate convert panics to errors and the hooks fail closed. Update audit status.	2026-09-30 13:44:59 +02:00
Hein	164ba2b240	fix(security): remove lock contention, cache rules, stop leaked goroutines ... Load column/row security without holding locks across provider calls, honour pOverwrite with a 30s TTL and pruning, cap tokens per Authorization header, detach session activity updates with a timeout, stop OAuth2 cleanup goroutines via Close, move nil-map checks inside locks, and drop O(n^2) string building. Update audit status.	2026-09-30 13:31:03 +02:00
Hein	97fe88b3a6	fix(modelregistry): address audit findings ... Replace try-lock/sleep scheme with blocking locks, add ErrModelNotFound/ ErrModelExists/ErrInvalidModel sentinels, make RegisterModelWithRules atomic, snapshot in IterateModels, guard defaultRegistry access, cap the pointer-unwrap depth, and recover panics in callbacks and reflection. Security hooks now allow-by-default only on ErrModelNotFound. Add tests.	2026-09-30 13:26:55 +02:00
Hein	bc8bff7955	docs(audit): add audit reports for pkg/testmodels and pkg/tracing	2026-09-29 17:15:00 +02:00