mission-control

Commit Graph

Author	SHA1	Message	Date
Nyk	afa8e9dacb	fix: security hardening from audit (closes #460 ) - Hash session tokens (SHA-256) before storing in DB; migration for existing tokens - Enforce 12-char password minimum on self-service change (was 8, creation was 12) - Increase scrypt cost N=16384→65536 with progressive rehash on login - Add MC_PROXY_AUTH_TRUSTED_IPS to restrict proxy auth header spoofing - Enable HSTS by default in production (opt-out via MC_DISABLE_HSTS=1) - Restrict debug endpoint to allowlisted gateway API paths (SSRF prevention) - Default session cookie secure=true in production - Gate MC_DISABLE_RATE_LIMIT on NODE_ENV !== 'production' - Remove password value from insecure-default log warning - chmod 600 generated secrets file in Docker entrypoint	2026-03-21 18:45:48 +07:00
Nyk	99815d20b3	feat: initial open-source release OpenClaw Mission Control — agent orchestration dashboard. Built with Next.js 16, React 19, TypeScript, SQLite, and Tailwind CSS. MIT License.	2026-02-23 02:00:44 +07:00

Author

SHA1

Message

Date

Nyk

afa8e9dacb

fix: security hardening from audit (closes #460 )

- Hash session tokens (SHA-256) before storing in DB; migration for existing tokens
- Enforce 12-char password minimum on self-service change (was 8, creation was 12)
- Increase scrypt cost N=16384→65536 with progressive rehash on login
- Add MC_PROXY_AUTH_TRUSTED_IPS to restrict proxy auth header spoofing
- Enable HSTS by default in production (opt-out via MC_DISABLE_HSTS=1)
- Restrict debug endpoint to allowlisted gateway API paths (SSRF prevention)
- Default session cookie secure=true in production
- Gate MC_DISABLE_RATE_LIMIT on NODE_ENV !== 'production'
- Remove password value from insecure-default log warning
- chmod 600 generated secrets file in Docker entrypoint

2026-03-21 18:45:48 +07:00

Nyk

99815d20b3

feat: initial open-source release

OpenClaw Mission Control — agent orchestration dashboard.

Built with Next.js 16, React 19, TypeScript, SQLite, and Tailwind CSS.
MIT License.

2026-02-23 02:00:44 +07:00

2 Commits