Commit History
-
security: fix hardcoded secret, gate demo mode, add CORS and rate limiting
KSvend +2: Claude, Happy- Secret reads from APERTURE_SECRET env var (falls back to dev default) - Demo token only returned when APERTURE_DEMO=true (default for dev) - CORS restricted to configured origins (open in demo mode only) - Rate limit on /api/auth/request: 5 requests per 5-minute window per IP - Download endpoints now require auth + job ownership check Generated with [Claude Code](https://claude.ai/code) via [Happy](https://happy.engineering) Co-Authored-By: Claude <noreply@anthropic.com> Co-Authored-By: Happy <yesreply@happy.engineering>3b71d95 -
feat: add get_current_user auth dependency and GET /api/jobs list endpoint
KSvend +1: Claude Opus 4.6 (1M context)Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>a7da499
-
Initial commit: Aperture platform (extracted from SR4S)
KSvendae74af5