elpatron dea33e3f00 feat(security): Session-Cookies statt X-User-Id und API-Härtung ...

Ersetzt die spoofbare X-User-Id-Auth durch signierte HttpOnly-Sessions nach
WebAuthn, erzwingt WRITE-only Sync, speichert den Master-Key nur im RAM und
ergänzt CORS, Rate-Limits, Helmet sowie Passkey-Reauth für sensible Aktionen.

Co-authored-by: Cursor <cursoragent@cursor.com>

2026-05-30 13:47:24 +02:00

..

designs

feat(security): Session-Cookies statt X-User-Id und API-Härtung

2026-05-30 13:47:24 +02:00

research

docs & feat: update project plan to E2E encrypted server storage & initialize monorepo client/server codebases

2026-05-27 21:22:02 +02:00

.gitignore

docs & feat: update project plan to E2E encrypted server storage & initialize monorepo client/server codebases

2026-05-27 21:22:02 +02:00

config.json

docs & feat: update project plan to E2E encrypted server storage & initialize monorepo client/server codebases

2026-05-27 21:22:02 +02:00

PROJECT.md

docs & feat: update project plan to E2E encrypted server storage & initialize monorepo client/server codebases

2026-05-27 21:22:02 +02:00

REQUIREMENTS.md

docs & feat: update project plan to E2E encrypted server storage & initialize monorepo client/server codebases

2026-05-27 21:22:02 +02:00

ROADMAP.md

feat: implement Phase 4 (CSV export, share, sync indicators, OS themes) and add dev starter script

2026-05-28 10:35:53 +02:00

STATE.md

feat: implement Phase 4 (CSV export, share, sync indicators, OS themes) and add dev starter script

2026-05-28 10:35:53 +02:00