5 commits

Author	SHA1	Message	Date
Wuesteon	4d15d9e764	🔒 security(auth): migrate to EdDSA JWT and add automated monitoring ... BREAKING: JWT keys are now auto-managed by Better Auth (EdDSA/Ed25519) - Remove all JWT_PRIVATE_KEY, JWT_PUBLIC_KEY, JWT_SECRET references - Keys stored in auth.jwks database table (auto-generated on first run) - Delete obsolete generate-keys.sh and generate-staging-secrets.sh scripts - Clean up legacy AUTH_*.md analysis files from root Security Improvements: - Add security_events table for audit logging - Add SecurityEventsService for tracking auth events - Enhanced security headers (HSTS, CSP, X-Frame-Options) - Rate limiting configuration Monitoring Setup: - Add auth-health-check.sh for automated testing - Add generate-dashboard.sh for HTML status dashboard - Tests: health endpoint, JWKS (EdDSA), security headers, response time - Ready for Hetzner cron deployment Documentation: - Update deployment docs with Better Auth notes - Update environment variable references - Add security improvements documentation 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>	2025-12-18 21:42:47 +01:00
Wuesteon	6e6815a5fa	📝 docs(auth): document Better Auth typing improvements ... Add comprehensive documentation for Better Auth improvements: - Centralized types package usage guide - Frontend type inference examples - Zod validation implementation - Rate limiting configuration - Integration test documentation - Migration guide for developers 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>	2025-12-16 02:45:41 +01:00
Wuesteon	0ebfde0851	fix(ci): build shared packages before tests and fix formatting ... - Add build:packages step to all test.yml jobs (fixes @manacore/shared-nestjs-auth not found) - Handle missing coverage artifacts gracefully in test-coverage.yml - Update .prettierignore to exclude apps-archived/ and problematic files - Format all source files to pass CI checks 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <noreply@anthropic.com>	2025-12-01 23:15:00 +01:00
Wuesteon	bc274846f0	📝 docs(auth): add comprehensive auth architecture documentation ... - AUTHENTICATION_ARCHITECTURE.md: JWT flow, EdDSA vs RS256, JWKS usage - CLAUDE.md: Guidelines to always use Better Auth native features - Common mistakes and fixes documented - Developer checklist for auth changes	2025-12-01 15:19:20 +01:00
Wuesteon	2a002bf6be	first auth impl	2025-12-01 13:30:58 +01:00