nxtgauge-ai-assistant

ashwin/nxtgauge-ai-assistant

Fork 0

Commit graph

Author	SHA1	Message	Date
Ashwin Kumar Sivakumar	23a707e175	Fix security audit findings: IDOR, rate limiting, action audit trail All checks were successful build-and-release / build (push) Successful in 4m14s Details - Chat and ticket-creation endpoints now scope lookups/attribution to the authenticated JWT identity instead of trusting a client-supplied user_id in the request body (IDOR) - Add per-user in-memory rate limiter on AI-generation endpoints to guard against unbounded LLM-cost abuse - Bind confirm_action to the authenticated user for audit logging - Bump vulnerable transitive dependencies via cargo update Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>	2026-07-23 17:32:01 +05:30
Ashwin Kumar	dbba72478c	feat(ai-assistant): bootstrap rust axum backend with providers, routes, and db scaffolding	2026-04-11 15:04:14 +02:00

Author

SHA1

Message

Date

Ashwin Kumar Sivakumar

23a707e175

Fix security audit findings: IDOR, rate limiting, action audit trail

build-and-release / build (push) Successful in 4m14s

Details

- Chat and ticket-creation endpoints now scope lookups/attribution to
  the authenticated JWT identity instead of trusting a client-supplied
  user_id in the request body (IDOR)
- Add per-user in-memory rate limiter on AI-generation endpoints to
  guard against unbounded LLM-cost abuse
- Bind confirm_action to the authenticated user for audit logging
- Bump vulnerable transitive dependencies via cargo update

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

2026-07-23 17:32:01 +05:30

Ashwin Kumar

dbba72478c

feat(ai-assistant): bootstrap rust axum backend with providers, routes, and db scaffolding

2026-04-11 15:04:14 +02:00

2 commits