quantum-ai-v2/wallet
Claude b145749ab2 🔒 Implement comprehensive wallet security improvements
Critical Security Fixes:
- Fix CSRF webhook vulnerability with IP validation and rate limiting
- Secure debug endpoint with superuser-only access and data masking
- Add rate limiting to all payment operations (5/min for top-up, 10/min for success)
- Replace debug print statements with secure logging throughout

Security Enhancements:
- Stripe webhook IP whitelist validation with current IP ranges
- Content type and payload size validation for webhooks
- Comprehensive error handling with sanitized error messages
- Proper logging for all payment operations and security events

Payment System Improvements:
- Enhanced duplicate payment prevention
- Improved error handling and user feedback
- Secure session verification and balance updates
- Comprehensive audit trail for all payment operations

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <noreply@anthropic.com>
2025-07-26 02:15:22 +05:30
..
migrations first working 2025-07-09 02:15:35 +05:30
__init__.py first working 2025-07-09 02:15:35 +05:30
admin.py first working 2025-07-09 02:15:35 +05:30
apps.py first working 2025-07-09 02:15:35 +05:30
models.py Fix NOT NULL constraint error for stripe_payment_intent_id 2025-07-16 23:01:31 +05:30
stripe_handler.py 🔒 Implement comprehensive wallet security improvements 2025-07-26 02:15:22 +05:30
tests.py first working 2025-07-09 02:15:35 +05:30
urls.py Refactor: Complete architecture reorganization with proper separation of concerns 2025-07-21 20:03:53 +05:30
views.py 🔒 Implement comprehensive wallet security improvements 2025-07-26 02:15:22 +05:30