Developer 2a7971eda1 Security fixes: Remove PAT, add idempotency, fix admin auth ...

- Remove exposed GitHub PAT from git remote URL
- Remove admin password plaintext fallback (bcrypt only)
- Add webhook idempotency protection to prevent duplicate payments
- Fix webhook error handling to return 500 on errors (enables retry)
- Upgrade archiver to v7 to fix npm vulnerabilities
- Add production environment validation for critical secrets
- Add comprehensive security review documentation

2026-02-20 21:51:45 +00:00

744 KiB

Raw Blame History

View Raw