managarten/.github/workflows
Wuesteon 4d15d9e764 🔒 security(auth): migrate to EdDSA JWT and add automated monitoring
BREAKING: JWT keys are now auto-managed by Better Auth (EdDSA/Ed25519)
- Remove all JWT_PRIVATE_KEY, JWT_PUBLIC_KEY, JWT_SECRET references
- Keys stored in auth.jwks database table (auto-generated on first run)
- Delete obsolete generate-keys.sh and generate-staging-secrets.sh scripts
- Clean up legacy AUTH_*.md analysis files from root

Security Improvements:
- Add security_events table for audit logging
- Add SecurityEventsService for tracking auth events
- Enhanced security headers (HSTS, CSP, X-Frame-Options)
- Rate limiting configuration

Monitoring Setup:
- Add auth-health-check.sh for automated testing
- Add generate-dashboard.sh for HTML status dashboard
- Tests: health endpoint, JWKS (EdDSA), security headers, response time
- Ready for Hetzner cron deployment

Documentation:
- Update deployment docs with Better Auth notes
- Update environment variable references
- Add security improvements documentation

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2025-12-18 21:42:47 +01:00
..
cd-production.yml 🔒 security(auth): migrate to EdDSA JWT and add automated monitoring 2025-12-18 21:42:47 +01:00
cd-staging-tagged.yml feat(ci): add database migrations step to tagged staging deployments 2025-12-09 16:40:46 +01:00
cd-staging.yml 🔒 security(auth): migrate to EdDSA JWT and add automated monitoring 2025-12-18 21:42:47 +01:00
ci-main.yml.bak chore(ci): rename backup files to .bak to prevent GitHub detection 2025-12-05 03:04:01 +01:00
ci-pull-request.yml.bak chore(ci): disable PR and dependency workflows for minimal setup 2025-12-05 03:06:24 +01:00
ci.yml 🚀 ci(picture): add picture app to CI/CD deployment pipeline 2025-12-17 18:47:42 +01:00
dependency-update.yml.bak chore(ci): disable PR and dependency workflows for minimal setup 2025-12-05 03:06:24 +01:00
staging-config-check.yml chore(ci): add staging config protection and validation 2025-12-10 13:48:45 +01:00
test-coverage.yml.bak chore(ci): rename backup files to .bak to prevent GitHub detection 2025-12-05 03:04:01 +01:00
test.yml.bak chore(ci): rename backup files to .bak to prevent GitHub detection 2025-12-05 03:04:01 +01:00