bao/nexus
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat(stability): unify readiness and recovery
CI - Build & Test / Backend (.NET) (push) Successful in 45s
Details
CI - Build & Test / Backend integration (PostgreSQL/Toxiproxy) (push) Failing after 1m0s
Details
CI - Build & Test / Frontend (Vue/TS) (push) Successful in 2m49s
Details
CI - Build & Test / Security Check (push) Successful in 7s
Details
CI - Build & Test / Deploy Nexus (push) Has been skipped
Details

Browse Source
This commit is contained in:
AzuTear
2026-08-01 01:21:33 +02:00
parent 38282e4f7f
commit cd8c78d165
67 changed files with 2616 additions and 601 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/architecture-board-first-orchestration.md
+3 -1
View File
@@ -184,7 +184,9 @@ Ebene 4: X-Agent-Id Header (Agent-Identität für Task-State-Enforcement)
- JWT-Sicherheit entspricht Best Practices (PBKDF2-SHA256, 210k Iterationen, Rotating Refresh Tokens)
- Refresh-Token-Reuse-Detection verhindert Token-Theft
- Rate-Limiting auf Login und Refresh
- CSRF-Protection via `X-CSRF-TOKEN` + `nexus-csrf` Cookie
- Cookie-backed Refresh/Logout über `Secure`, `HttpOnly`, `SameSite=Strict`
plus `Origin`-/`Sec-Fetch-Site`-Prüfung; die unvalidierte Legacy-CSRF-Route
wurde in v0.2.60 entfernt
- Security Headers (HSTS, CSP, XFO, Referrer-Policy)
**Kritisch:**