3 Commits

Author	SHA1	Message	Date
Jarian Cottingham	7e85cb1acd	fix: PBKDF2 key derivation (#5), HMAC salted recovery codes (#4), HSTS (#8) ... - SQLCipher key: SHA256 -> PBKDF2-HMAC-SHA256 with 100k iterations - Recovery code hashing: SHA256 -> HMAC-SHA256 with salt - Add Strict-Transport-Security, X-Content-Type-Options, X-Frame-Options, CSP headers	2026-07-05 04:28:15 +00:00
Jarian Cottingham	606b7c71c2	fix: add API key auth, PIN rate limiting, configurable NAS, bootstrap fix (#1,#3,#6,#7) ... Require Bearer token on all API endpoints (PINVAULT_API_KEY env). Rate limit PIN access to 5 attempts per 15min lockout per PIN. Make NAS_BACKUP_DIR configurable via PINVAULT_NAS_BACKUP_DIR. Replace bootstrap() sys.exit(1) with graceful False return. Add tests for rate limiting and auth.	2026-07-04 04:54:33 +00:00
Jarian Cottingham	10baf2dfaa	add pinvault app	2026-06-30 15:02:15 +00:00