3 Commits

Author	SHA1	Message	Date
Aditya Gupta	a27bd118e5	fix: Cross-User Write, strict CORS, rate limiting ... - IDOR in sync api - if server was run in prod without jwt secret var then it fell back to inscure string; added startup check - restrict query requests to vite origin - use `express-rate-limit`. 100 requests per 15-minute window for a client	2026-06-06 22:14:53 +05:30
Aditya Gupta	9168ece209	fix: user session management	2026-06-06 08:47:24 +05:30
Aditya Gupta	4ee2649d84	init commit	2026-06-06 08:29:21 +05:30