Commits

Breadcrumbs

History for

onfix/constant-time-api-key-comparison-287

User selector

All users

Datepicker

All time

Commit history

Commits on Sep 6, 2026

• fix(logging): emit single error log line per failed request (closes #299) (#322)

  Show description for 0a207d1
  

  katakata0522

  and

  Netty-kun

  authored
  0a207d1View commit details

  Copy full SHA for 0a207d1

  View code at this pointBrowse repository at this point

• refactor(http): preserve generic request types in asyncHandler and drop body casts (closes #296) (#332)

  Show description for dd60db5
  

  Salahalioui

  and

  Netty-kun

  authored
  dd60db5View commit details

  Copy full SHA for dd60db5

  View code at this pointBrowse repository at this point

• feat(http): emit X-Request-Id header correlated with pino request logs (closes #268) (#350)

  Show description for 1630a9c
  

  3 peopleauthored
  1630a9cView commit details

  Copy full SHA for 1630a9c

  View code at this pointBrowse repository at this point

• fix(security): sanitize sensitive query params in error logs and response urls (#282, #283) (#355)

  Show description for 349c52b
  

  3 peopleauthored
  349c52bView commit details

  Copy full SHA for 349c52b

  View code at this pointBrowse repository at this point

• fix(security): use constant-time comparison for API key auth (#287) (#358)

  Show description for 048552e
  

  3 peopleauthored
  048552eView commit details

  Copy full SHA for 048552e

  View code at this pointBrowse repository at this point

• refactor(#269): extract an injectable shutdown lifecycle helper with tests (#375)

  Show description for e6407e8
  foxxx009

  authored
  e6407e8View commit details

  Copy full SHA for e6407e8

  View code at this pointBrowse repository at this point

• fix(http): sanitize request URLs in error-handler log entries and 404 messages (#282) (#379)

  Show description for b181dfc
  

  Anthgg

  and

  Netty-kun

  authored
  b181dfcView commit details

  Copy full SHA for b181dfc

  View code at this pointBrowse repository at this point

• fix(errors): persist error code on AppError and emit in error envelope (closes #259) (#393)

  Show description for dbb9e28
  Ranjeet2063

  authored
  dbb9e28View commit details

  Copy full SHA for dbb9e28

  View code at this pointBrowse repository at this point

• fix(logging): trim response headers from pino-http access logs (#397)

  Show description for 9dedd51
  

  Senthemodder

  and

  Senthemodder

  authored
  9dedd51View commit details

  Copy full SHA for 9dedd51

  View code at this pointBrowse repository at this point

• feat(http): bound capacity and sweep expired entries in idempotency store (#401)

  Show description for c16ae93
  

  Senthemodder

  and

  Senthemodder

  authored
  c16ae93View commit details

  Copy full SHA for c16ae93

  View code at this pointBrowse repository at this point

• fix(security): compare configured API keys in constant time (#402)

  Show description for c85f173
  

  Senthemodder

  and

  Senthemodder

  authored
  c85f173View commit details

  Copy full SHA for c85f173

  View code at this pointBrowse repository at this point

Commits on Sep 3, 2026

• fix(backend): repair merge-corrupted HTTP middleware and remove stray bot files

  Show description for 90d8e6f
  Netty-kun

  committed
  90d8e6fView commit details

  Copy full SHA for 90d8e6f

  View code at this pointBrowse repository at this point

Commits on Sep 2, 2026

• Fix #124: [Bounty: $80] Add tests for payloads exceeding bodySizeLimit returning 413 (#155)

  Show description for 3d15cdc
  

  gnomedev-gvs

  and

  Netty-kun

  authored
  3d15cdcView commit details

  Copy full SHA for 3d15cdc

  View code at this pointBrowse repository at this point

• Handle HTTP parser errors and validate payment quotes (#157)

  Show description for 20f2010
  

  Danop404

  and

  Netty-kun

  authored
  20f2010View commit details

  Copy full SHA for 20f2010

  View code at this pointBrowse repository at this point

• Fix #123: [Bounty: $75] Add tests for malformed JSON bodies returning a 400 error (#158)

  Show description for 2def2c0
  

  gnomedev-gvs

  and

  Netty-kun

  authored
  2def2c0View commit details

  Copy full SHA for 2def2c0

  View code at this pointBrowse repository at this point

• Reject unknown agent payload keys (#162)

  Show description for 27ed766
  

  Danop404

  and

  Netty-kun

  authored
  27ed766View commit details

  Copy full SHA for 27ed766

  View code at this pointBrowse repository at this point

• security: redact sensitive request log data (#167)

  Show description for 6c5f2cc
  

  kyrossss

  and

  Netty-kun

  authored
  6c5f2ccView commit details

  Copy full SHA for 6c5f2cc

  View code at this pointBrowse repository at this point

• feat: add API-key authentication middleware (issue #81) (#173)

  Show description for cc71f3c
  

  3 peopleauthored
  cc71f3cView commit details

  Copy full SHA for cc71f3c

  View code at this pointBrowse repository at this point

• feat(http): add Cache-Control: no-store to all API responses (#76) (#179)

  Show description for 3a47e4a
  

  3 peopleauthored
  3a47e4aView commit details

  Copy full SHA for 3a47e4a

  View code at this pointBrowse repository at this point

• feat(http): add 405 Method Not Allowed handling for known routes (#131) (#187)

  Show description for be3db76
  

  3 peopleauthored
  be3db76View commit details

  Copy full SHA for be3db76

  View code at this pointBrowse repository at this point

• feat(agents): add idempotency-key middleware for agent creation (#119) (#196)

  Show description for 3e224aa
  

  3 peopleauthored
  3e224aaView commit details

  Copy full SHA for 3e224aa

  View code at this pointBrowse repository at this point

• feat(http): add validateParams and validateQuery middleware helpers (#86) (#205)

  Show description for dc3b358
  

  rafaio1

  and

  root

  authored
  dc3b358View commit details

  Copy full SHA for dc3b358

  View code at this pointBrowse repository at this point

• 修复客户端错误日志级别并补充回归测试 (#219)

  Lang5200

  authored
  6d3a3b5View commit details

  Copy full SHA for 6d3a3b5

  View code at this pointBrowse repository at this point

• feat(http): add structured error codes to AppError and error responses (#228)

  Show description for e83a582
  

  albertstayhome

  and

  Netty-kun

  authored
  e83a582View commit details

  Copy full SHA for e83a582

  View code at this pointBrowse repository at this point

• feat(dx): add tsconfig path aliases to replace deep relative imports (#57) (#231)

  Show description for 2e10505
  

  albertstayhome

  and

  Netty-kun

  authored
  2e10505View commit details

  Copy full SHA for 2e10505

  View code at this pointBrowse repository at this point

• test: add production error message redaction tests (#127) (#242)

  Show description for 82db4cd
  

  rafaio1

  and

  root

  authored
  82db4cdView commit details

  Copy full SHA for 82db4cd

  View code at this pointBrowse repository at this point

• test: add 405 method not allowed tests and fix middleware for Express 5 (#245)

  Show description for 5c2a989
  

  rafaio1

  and

  root

  authored
  5c2a989View commit details

  Copy full SHA for 5c2a989

  View code at this pointBrowse repository at this point

• fix(http): handle body-parser SyntaxErrors as 400 Bad Request (#142) (#251)

  Show description for dc636da
  

  3 peopleauthored
  dc636daView commit details

  Copy full SHA for dc636da

  View code at this pointBrowse repository at this point

Commits on May 16, 2026

• feat: add typed API response and validation helpers

  

  David-patrick-chuks

  committed
  6a57cdfView commit details

  Copy full SHA for 6a57cdf

  View code at this pointBrowse repository at this point

• feat: add shared HTTP error handling utilities

  

  David-patrick-chuks

  committed
  3ea51c7View commit details

  Copy full SHA for 3ea51c7

  View code at this pointBrowse repository at this point

Loading