4 commits

Author	SHA1	Message	Date
Claude	439d07c9de	refactor: standardise error response format across API controllers ... Add HasStandardApiResponses trait with consistent error format: {"success": false, "error": "Human-readable message", "code": "MACHINE_READABLE_CODE"} Applied to EntitlementApiController, EntitlementWebhookController, and WorkspaceController. Updated tests to assert the new format. Fixes #20 Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-03-24 13:31:58 +00:00
Snider	8a521d4f3e	security: fix P1 items for rate limiting, auth, SSRF and workspace validation ... P1-010: Rate limiting (60 req/min) on EntitlementApiController P1-011: API authentication documentation and middleware P1-014: SSRF protection for webhook endpoints (PreventsSSRF trait) P1-015: Workspace access validation in middleware (breaking change) Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>	2026-01-29 13:19:27 +00:00
Snider	d0ad2737cb	refactor: rename namespace from Core\Mod\Tenant to Core\Tenant ... Simplifies the namespace hierarchy by removing the intermediate Mod segment. Updates all 118 files including models, services, controllers, middleware, tests, and composer.json autoload configuration. Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>	2026-01-27 16:30:46 +00:00
Snider	86dbf4e763	fix: namespace to Core\Mod\Tenant, restructure package ... - Changed namespace from Core\Core\Tenant to Core\Mod\Tenant - Moved src/ contents to root - Removed Host UK extension files (admin.php, MemberManager, TeamManager) - Fixed composer.json autoload paths	2026-01-27 00:58:42 +00:00

Renamed from src/Controllers/Api/EntitlementWebhookController.php (Browse further)