2 Commits

Author SHA1 Message Date
Stalin 05f081b205 Fix JWT signature verification vulnerability (GHSA-223g-f5mq-gw33)
- Enable proper JWT signature verification in backend/routes/dashboard.py
- Enable proper JWT signature verification in backend/main.py
- Enable proper JWT signature verification in backend/activity_logger.py
- Replace verify_signature=False with cryptographic verification using JWT_SECRET_KEY
- Prevents JWT forgery attacks and account takeover
2026-05-07 16:57:42 +05:30
Stalin 9115fc5ffd feat: unify real activity tracking, admin monitoring, and error UX 2026-04-19 17:51:32 +05:30