Files
mpc/pkg
zeekay 97e49a5ecf security: fix 3 critical findings from Red team review
CRITICAL-1: KMS routes registered outside auth middleware — moved inside
  authenticated route group with requireRole("owner", "admin")
CRITICAL-2: X-Org-ID header trusted without validation — replaced with
  getOrgID(r.Context()) from JWT claims
CRITICAL-3: (KMS standalone addressed in lux/kms repo)
2025-12-28 01:39:55 -08:00
..
2024-09-21 20:52:40 +07:00
2025-08-02 22:27:51 -05:00
2025-08-02 22:27:51 -05:00