caoimhinr/corvid
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
12 commits 2 branches 0 tags 216 KiB
Commit graph

1 commit

Author SHA1 Message Date
caoimhinr
961fc67528 security: timing-safe API key comparison, remove hardcoded DB password 
- Use hmac.compare_digest for constant-time key check (router.py)
- Move POSTGRES_PASSWORD out of docker-compose.yml into .env (was a
  public default "corvid" now that the repo is public)
- Add .env.example with placeholder values

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-05-25 19:46:25 +02:00