Yusuf Suleman fb79f15f75 fix(fitness): eliminate cross-user data access (#4) ...

- All user_id query params now enforced to authenticated user's own ID
- /api/users restricted to return only current user (no user enumeration)
- Wildcard CORS headers removed (service is internal-only via gateway)
- Covers: entries, totals, goals, templates, favorites, goal setting

Closes #4

2026-03-29 08:53:04 -05:00

.claude

Initial commit: Second Brain Platform

2026-03-28 23:20:40 -05:00

docs

Initial commit: Second Brain Platform

2026-03-28 23:20:40 -05:00

frontend-v2

fix: security hardening across platform

2026-03-29 08:25:50 -05:00

gateway

fix: security hardening across platform

2026-03-29 08:25:50 -05:00

packages

Initial commit: Second Brain Platform

2026-03-28 23:20:40 -05:00

services

fix(fitness): eliminate cross-user data access (#4)

2026-03-29 08:53:04 -05:00

.env.example

Initial commit: Second Brain Platform

2026-03-28 23:20:40 -05:00

.gitignore

fix: security hardening across platform

2026-03-29 08:25:50 -05:00

claude_remediation_prompt.txt

fix(trips): enforce password protection on shared trips (#3)

2026-03-29 08:50:45 -05:00

docker-compose.yml

Initial commit: Second Brain Platform

2026-03-28 23:20:40 -05:00

package-lock.json

Initial commit: Second Brain Platform

2026-03-28 23:20:40 -05:00

package.json

Initial commit: Second Brain Platform

2026-03-28 23:20:40 -05:00

Description

Second Brain Platform - Dashboard, Fitness, Budget, Inventory, Trips, Reader, Media

31 MiB

Languages

Svelte 51.2%

Python 24.2%

Swift 13.5%

JavaScript 5.4%

TypeScript 3.3%

Other 2.4%