4 Commits

Author	SHA1	Message	Date
Mondo Diaz	6aa199b80b	Add rate limiting to login endpoint ... Security: - Add slowapi dependency for rate limiting - Create rate_limit.py module with configurable limits - Apply 5 requests/minute limit to login endpoint - Make rate limit configurable via ORCHARD_LOGIN_RATE_LIMIT env var Testing: - Set high rate limit (1000/min) in docker-compose.local.yml for tests - All 265 tests pass	2026-01-08 18:18:29 -06:00
Mondo Diaz	696793c84f	Fix auth datetime comparison and bcrypt dependency ... - Use timezone-aware datetimes (datetime.now(timezone.utc)) for session expiry comparison - Add explicit bcrypt==4.0.1 dependency for passlib bcrypt backend	2026-01-08 15:14:54 -06:00
Mondo Diaz	7e68baed08	Add ref_count management for deletions with atomic operations and error handling	2026-01-06 13:44:23 -06:00
Mondo Diaz	2261bfc830	Rewrite from Go + vanilla JS to Python (FastAPI) + React (TypeScript) ... - Backend: Python 3.12 with FastAPI, SQLAlchemy, boto3 - Frontend: React 18 with TypeScript, Vite build tooling - Updated Dockerfile for multi-stage Node + Python build - Updated CI pipeline for Python backend - Removed old Go code (cmd/, internal/, go.mod, go.sum) - Updated README with new tech stack documentation	2025-12-05 17:16:43 -06:00