Emily/UniversalGamingApp-Backend
Watch
1
0
Fork
You've already forked UniversalGamingApp-Backend
 0
Code Issues Pull requests Projects Releases 11 Packages Wiki Activity Actions
11 releases 12 tags
  • v1.0.4 ed482728f2

    Universal Gaming Accounts 1.0.4 Stable

    Emily released this 2026-11-04 12:57:45 +01:00 | 15 commits to main since this release

    Universal Gaming Accounts 1.0.4

    Security hardening from the November 2026 review:

    • Passwords longer than 72 bytes are no longer truncated. New hashes use SHA-256 pre-hashing before bcrypt; legacy bcrypt hashes are verified and upgraded automatically on the next successful sign-in.
    • Oversized request bodies return HTTP 413 instead of an internal error.
    • JWTs are pinned to HS256 in addition to the existing issuer/audience checks.
    • TRUSTED_PROXIES remains the recommended way to trust reverse proxies; TRUST_PROXY=true is still a legacy fallback.
    • Docker Compose image bumped to universal-gaming-backend:1.0.4.

    No API changes. Existing accounts continue to work.

    Downloads