Uwe Schuster
|
32356ad226
|
v0.1.0: initial clean-lift from fewo-webapp
Header-only C++ library; CMake config package; zero-coupling files lifted
from fewo-webapp:
interceptor/SecurityHeadersInterceptor.hpp
interceptor/BodySizeLimitInterceptor.hpp
handler/JsonErrorHandler.hpp
util/RateLimiter.hpp
util/TokenExtract.hpp (extractToken, isValidIp, clientIpTrusted)
startup/RequireEncryptionKey.hpp
fewo-specific couplings (bindAddress global, fewo::config) replaced with
explicit function arguments so the library stands alone.
AuthInterceptor + requireAdmin deferred to v0.2 — they need IAuthBackend /
IAuthPolicy / IRuntimeConfig seams designed first.
docs/security-baseline.md ships CSP / rate-limit / body-size / encryption
key constants as language-neutral baselines for non-C++ consumers.
Closes fewo-webapp#412
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
|
2026-04-21 21:42:53 +02:00 |
|