soeren/fotospiel-app
1
0
Fork 0
Code Issues Pull Requests Actions 2 Packages Projects Releases Wiki Activity

updated the docs, removed oauth and introduced sanctum pat

Browse Source
This commit is contained in:
Codex Agent
2025-11-07 07:47:25 +01:00
parent 67affd3317
commit 9cc9950b0c
16 changed files with 153 additions and 503 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
docs/implementation-roadmap.md
View File

@@ -97,8 +97,8 @@ Basierend auf aktueller Code-Analyse und Implementierung:
### Verbleibende Tasks
1. **Security Implementation (1 Tag)**
- Rate Limiting: 100/min tenant, 10/min oauth *(aktiv)*
- Token-Rotation in OAuthController *(KID-basierte Schlüssel & `oauth:rotate-keys`)*
- Rate Limiting: 100/min tenant API, 20/min tenant-auth login/exchange *(aktiv)*
- Token issuance handled by Sanctum PAT endpoints; rotation via PAT revocation *(aktiv)*
- IP-Binding für Refresh Tokens *(konfigurierbar, Subnetzrelax optional)*
### Milestones