yusiboyz
0 Followers · 0 Following
  • Joined on 2026-03-28
Repositories
1
 Projects Packages Public Activity Starred Repositories
yusiboyz pushed to master at yusiboyz/platform 2026-03-29 09:06:43 -05:00
fcb9383623 fix(gateway): enforce API key auth on inventory and budget services (#5)
yusiboyz commented on issue yusiboyz/platform#4 2026-03-29 08:53:16 -05:00
Fitness Authorization: Eliminate Cross-User Data Access

Fixed in commit fb79f15

Changes (services/fitness/server.py):

  • 5 GET endpoints: user_id param replaced with authenticated user ID
  • 1 PUT endpoint (goals): user_id param replaced with…
yusiboyz pushed to master at yusiboyz/platform 2026-03-29 08:53:06 -05:00
fb79f15f75 fix(fitness): eliminate cross-user data access (#4)
yusiboyz closed issue yusiboyz/platform#4 2026-03-29 08:53:06 -05:00
Fitness Authorization: Eliminate Cross-User Data Access
yusiboyz commented on issue yusiboyz/platform#3 2026-03-29 08:50:58 -05:00
Trips Sharing Security: Enforce Protection and Remove Plaintext Secrets

Fixed in commit d700ba7

Changes:

  • services/trips/server.py: handle_share_api now enforces password via X-Share-Password header + bcrypt
  • services/trips/server.py: handle_share_verify…
yusiboyz closed issue yusiboyz/platform#3 2026-03-29 08:50:46 -05:00
Trips Sharing Security: Enforce Protection and Remove Plaintext Secrets
yusiboyz pushed to master at yusiboyz/platform 2026-03-29 08:50:46 -05:00
d700ba7569 fix(trips): enforce password protection on shared trips (#3)
yusiboyz commented on issue yusiboyz/platform#1 2026-03-29 08:43:51 -05:00
Production Security and Readiness Remediation

Tracking map:

Immediate:

  • #2 Auth Boundary: Registration and Default Credentials
  • #3 Trips Sharing Security
  • #4 Fitness Authorization
  • #5 Gateway Trust Model
  • #6 Repository Hygiene
  • #7…
yusiboyz opened issue yusiboyz/platform#9 2026-03-29 08:35:01 -05:00
Performance Hardening: Cache and De-risk Summary Endpoints
yusiboyz opened issue yusiboyz/platform#10 2026-03-29 08:35:01 -05:00
Deployment Hardening: Containers, Health Checks, and Production Readiness
yusiboyz opened issue yusiboyz/platform#8 2026-03-29 08:35:00 -05:00
Dependency Security and CI Enforcement
yusiboyz opened issue yusiboyz/platform#2 2026-03-29 08:35:00 -05:00
Auth Boundary: Registration and Default Credentials
yusiboyz opened issue yusiboyz/platform#1 2026-03-29 08:35:00 -05:00
Production Security and Readiness Remediation
yusiboyz opened issue yusiboyz/platform#7 2026-03-29 08:35:00 -05:00
Transport Security: Finish Cookie Hardening, TLS Verification, and Proxy Controls
yusiboyz opened issue yusiboyz/platform#6 2026-03-29 08:35:00 -05:00
Repository Hygiene: Remove Tracked Secrets and Runtime Databases
yusiboyz opened issue yusiboyz/platform#5 2026-03-29 08:35:00 -05:00
Gateway Trust Model: Protect Internal Services and Service-Level Data
yusiboyz opened issue yusiboyz/platform#4 2026-03-29 08:35:00 -05:00
Fitness Authorization: Eliminate Cross-User Data Access
yusiboyz opened issue yusiboyz/platform#3 2026-03-29 08:35:00 -05:00
Trips Sharing Security: Enforce Protection and Remove Plaintext Secrets
yusiboyz pushed to master at yusiboyz/platform 2026-03-29 08:25:51 -05:00
6bd23e7e8b fix: security hardening across platform
yusiboyz pushed to master at yusiboyz/platform 2026-03-29 07:08:38 -05:00
d1801540ae fix: switch to ThreadingHTTPServer for concurrent request handling