64.8 kB

Ctrl+K

1 contributor

History: 32 commits

Shaurya2020

fix(medium): admin login lockout — log login_attempts + lock after 5 fails/15min

356850e verified 2 months ago

aesEnvelope.js

2.35 kB
fix(medium): AES envelope fail-closed if enabled but key missing/<16 chars 2 months ago
auth.js

2.62 kB
fix(high): JWT_SECRET fail-closed in production (dev fallback for non-production) 2 months ago
db.js

8.64 kB
fix: remove duplicate export of db 2 months ago
guards.js

3.26 kB
feat: server/guards.js market-ready guards (RG/geo/pwd/bet-limits/settlement-lock) 2 months ago
index.js

2.68 kB
fix(medium): strict CSP via helmet + money-route rate limit (60/min on bets/deposit/withdraw/kyc) 2 months ago
player.js

8.17 kB
fix: register sets parent_id=1 (superadmin) so self-registered players are in hierarchy 2 months ago
routes-content.js

6.21 kB
add: content routes (banners/news/kyc/limits/audit) split from routes-platform; self-exclude now requires role + canSeeUser 2 months ago
routes-core.js

3.24 kB
fix(medium): admin login lockout — log login_attempts + lock after 5 fails/15min 2 months ago
routes-crud.js

6.75 kB
fix(medium): money/secret tables (bonuses, game-rounds, transactions, api-keys, webhooks) now read-only admin views 2 months ago
routes-platform.js

6.22 kB
fix(critical): payment approve re-checks balance inside tx for withdrawals + canSeeUser scope; split content routes to routes-content.js 2 months ago
routes-settle.js

4.66 kB
fix(critical): settle math — lose deducts balance (back=stake, lay=liability); win credits potential_payout for both sides; add canSeeUser scope to settle/void/get 2 months ago
routes-users.js

7.15 kB
fix(high): user mgmt — POST /users ignores client parentId (validates canSeeUser); PUT/reset-password/reset-txn add requireRole+requireTxnPassword+rank check; all scoped via canSeeUser 2 months ago
routes.js

403 Bytes
update: register routes-users module (split from core) 2 months ago
seed.js

2.44 kB
fix: trailing comma in banners insert 2 months ago