Hein 8a94d884e7 fix(security): verify passwords, bind row-security args, fail closed on panic ...

Verify bcrypt passwords in Direct mode and the shipped procedures, hash on
register/reset, ignore client-supplied roles and level at registration and
drop the password from the jwt_login payload. Legacy cleartext upgrade is
opt-in. Row security templates now bind the user as a parameter, validate
identifiers, attach via common.SelectQuery and fail the request if the
filter cannot be attached. ApplyColumnSecurity and GetRowSecurityTemplate
convert panics to errors and the hooks fail closed. Update audit status.

2026-09-30 13:44:59 +02:00

..

_CROSS-CUTTING.audit.md

fix(tracing): address audit findings

2026-09-30 13:39:50 +02:00

cache.audit.md

fix(cache): harden providers and default cache handling

2026-09-30 13:13:06 +02:00

common.audit.md

docs(audit): add audit report for pkg/common

2026-09-30 13:16:47 +02:00

config.audit.md

fix(config): lock Manager, harden defaults handling and path/IP helpers

2026-09-30 13:02:40 +02:00

dbmanager.audit.md

fix(dbmanager): keep the pool alive across errors and restarts

2026-09-30 12:40:14 +02:00

errortracking.audit.md

docs(audit): add audit reports for pkg/testmodels and pkg/tracing

2026-09-29 17:15:00 +02:00

logger.audit.md

fix(modelregistry): address audit findings

2026-09-30 13:26:55 +02:00

metrics.audit.md

docs(audit): add audit reports for pkg/testmodels and pkg/tracing

2026-09-29 17:15:00 +02:00

middleware.audit.md

docs(audit): add audit reports for pkg/testmodels and pkg/tracing

2026-09-29 17:15:00 +02:00

modelregistry.audit.md

fix(modelregistry): address audit findings

2026-09-30 13:26:55 +02:00

security.audit.md

fix(security): verify passwords, bind row-security args, fail closed on panic

2026-09-30 13:44:59 +02:00

testmodels.audit.md

docs(audit): add audit reports for pkg/testmodels and pkg/tracing

2026-09-29 17:15:00 +02:00

tracing.audit.md

fix(tracing): address audit findings

2026-09-30 13:39:50 +02:00