amit/quantum-ai-v3
1
0
Fork 0
mirror of https://github.com/thecyberlearn/quantum-ai-v3.git synced 2026-08-18 12:52:58 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity
235 Commits 1 Branch 0 Tags 1.8 MiB
9fc669d9d2
Commit Graph

5 Commits

Author SHA1 Message Date
Claude
e8ade314a6 🔧 Remove email verification system and update event URL 
- Remove email_verified field from User model
- Delete EmailVerificationToken model and related views
- Update registration to auto-login users without verification
- Change event URL from /event-invitation/ to /event/
- Update Railway deployment configuration
- Remove email verification templates and URLs

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <noreply@anthropic.com>
 2025-08-16 12:35:26 +05:30
Claude
916d37fd64 🔒 CRITICAL: Implement comprehensive authentication security improvements 
CRITICAL SECURITY FIXES:
• Fix information disclosure in error messages - prevent system info leakage
• Implement rate limiting - 5 login attempts/min, 3 registration/min, 3 password reset/5min
• Add backend password strength validation - enforce strong passwords with complexity rules
• Implement email verification - require email confirmation for new accounts

SECURITY ENHANCEMENTS:
• Sanitize all error messages to prevent information leakage
• Add comprehensive rate limiting with django-ratelimit
• Enforce password requirements: 8+ chars, upper/lower case, numbers, special chars
• Block common weak passwords (password, 123456, etc.)
• Email verification with 24-hour secure UUID tokens
• Prevent login without email verification
• Security logging for monitoring and audit trails

TECHNICAL IMPROVEMENTS:
• Add EmailVerificationToken model with auto-expiration
• Add password strength validation function with detailed rules
• Add send_verification_email() utility function
• Add resend verification functionality with rate limiting
• Update existing users to verified status for continuity
• Add comprehensive URL routing for verification flows

BUSINESS BENEFITS:
• Enhanced platform security and user trust
• Reduced fake accounts and email abuse
• Better compliance with security standards
• Improved user account protection

Security rating improved significantly ⬆️
All critical authentication vulnerabilities resolved ✅

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <noreply@anthropic.com>
 2025-07-26 01:53:05 +05:30
Claude
d36cf9a79d Fix email URLs to use Railway domain instead of localhost 
- Add SITE_URL configuration that auto-detects Railway environment
- Update forgot password view to use correct site URL in emails
- Ensure password reset links work on both local and Railway deployments

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <noreply@anthropic.com>
 2025-07-16 13:11:06 +05:30
Claude
1aac14f44b Implement individual agent architecture with simplified template structure 
- Replace legacy agents system with modular individual agent apps
- Add agent_base framework for BaseAgent, processors, and management commands
- Create weather_reporter as example individual agent with API integration
- Implement simplified template structure: agent_name/templates/detail.html
- Fix marketplace to display actual agents instead of placeholder
- Add proper authentication flow with login redirect for agent access
- Organize project structure: move tests to tests/, docs to docs/
- Update all documentation to reflect new simplified architecture
- Fix URL namespace issues throughout templates and views

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <noreply@anthropic.com>
 2025-07-10 09:01:11 +05:30
Claude
67ba2de335 first working 2025-07-09 02:15:35 +05:30