mroberts/Clarium
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
4 Commits 1 Branch 0 Tags
7c09154b76d1baa1b6a6538259b3406bebec4f63
Commit Graph
4 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
mroberts 7c09154b76 feat: add peppered PBKDF2 password hashing 
Implements password hashing with PBKDF2-SHA256 and pepper-based additional security.
Includes password verification, rehash detection, and pepper loading from environment
or file.

Claude-Session: https://claude.ai/code/session_01M9MLit5Ko3X4s7rzC5Kv7X
 2026-10-02 14:13:40 -05:00
mroberts b15448f109 feat: scaffold Flask + React app with schema and JSON error handling 
Claude-Session: https://claude.ai/code/session_01M9MLit5Ko3X4s7rzC5Kv7X
 2026-10-02 14:11:37 -05:00
mroberts 02d4598697 docs: add implementation plan; fix session cap and genre seed in spec 
Session validation now also checks created_at so the 12-hour cap holds
while expires_at is still in the future. Genre seed avoids ON CONFLICT,
which burns SMALLSERIAL values on every startup.
 2026-10-02 13:59:50 -05:00
mroberts de38590f46 docs: add book tracker design spec and auth ADRs 
Spec covers data model, API, auth, frontend, error handling, and testing.
ADR-0001 records PBKDF2 + pepper (FIPS) over argon2; ADR-0002 records
revocable server-side sessions over Flask's signed cookie.
 2026-10-02 13:38:46 -05:00