core/php-tenant
8
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 1
9 commits 2 branches 0 tags 368 KiB
Commit graph

9 commits

This branch
This branch
All branches
Author SHA1 Message Date
Snider
8a521d4f3e security: fix P1 items for rate limiting, auth, SSRF and workspace validation 
P1-010: Rate limiting (60 req/min) on EntitlementApiController
P1-011: API authentication documentation and middleware
P1-014: SSRF protection for webhook endpoints (PreventsSSRF trait)
P1-015: Workspace access validation in middleware (breaking change)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
 2026-01-29 13:19:27 +00:00
Snider
a35cbc9306 security: encrypt 2FA secrets and hash invitation tokens 
- Add encrypted cast to UserTwoFactorAuth secret and recovery_codes
- Hash invitation tokens on creation using Hash::make()
- Update token verification to use Hash::check()
- Add migration commands for existing data:
  - security:encrypt-2fa-secrets
  - security:hash-invitation-tokens
- Add tests for encryption and hashing

Fixes SEC-003, SEC-004 from security audit.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
 2026-01-29 12:20:53 +00:00
Snider
8be7516d3a docs: update CLAUDE.md with correct namespace and architecture details 
Fix namespace from Core\Mod\Tenant to Core\Tenant, add workspace
isolation patterns, coding standards, and entitlement system overview.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
 2026-01-28 14:16:40 +00:00
Snider
d0ad2737cb refactor: rename namespace from Core\Mod\Tenant to Core\Tenant 
Simplifies the namespace hierarchy by removing the intermediate Mod
segment. Updates all 118 files including models, services, controllers,
middleware, tests, and composer.json autoload configuration.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
 2026-01-27 16:30:46 +00:00
Snider
68525ca247 feat(tenant): add team and member manager admin components 
- Add TeamManager Livewire component for managing workspace teams
- Add MemberManager Livewire component for managing workspace members
- Add admin routes for team and member management
- Add blade templates for team and member management UI
- Support team permissions, bulk operations, and custom member permissions

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
 2026-01-27 10:21:25 +00:00
Snider
86dbf4e763 fix: namespace to Core\Mod\Tenant, restructure package 
- Changed namespace from Core\Core\Tenant to Core\Mod\Tenant
- Moved src/ contents to root
- Removed Host UK extension files (admin.php, MemberManager, TeamManager)
- Fixed composer.json autoload paths
 2026-01-27 00:58:42 +00:00
Snider
acceff6d36 monorepo sepration 2026-01-27 00:31:43 +00:00
Snider
bc9ffd74d3 monorepo sepration 2026-01-26 21:08:59 +00:00
Snider
496551ee53
Initial commit 2026-01-26 21:03:15 +00:00