7503a54f81
- New audit_log table (migration v0.45) with indexes - logAudit() service with try/catch safety (never crashes app) - Audit events: login.success, login.failure, logout, password.change, role.change, csrf.failure, profile.update, profile.settings.update - All events include ip_address and user_agent - No passwords, tokens, or session IDs logged - Hudson security audit: 7/7 PASS |
||
|---|---|---|
| .. | ||
| csrf.js | ||
| errorFormatter.js | ||
| rateLimiter.js | ||
| requireAuth.js | ||
| securityHeaders.js | ||