Simplification: - /validate-otk endpoint now only returns *** ID and TTL - No longer sets cookies (Next.js handles this directly) - Added getSessionTtlSeconds()...

snadjafinia·Oct 14, 2025

OtherSecurityService

Reduce *** ID length from 512 to 128 characters

Changes: - ***_ID_LENGTH: 512 -> 128 (64 bytes of entropy) - Updated all documentation and comments - Updated logging to show full 128-char ID - OTK length rema...

snadjafinia·Oct 14, 2025

OtherSecurityService

Increase *** ID length to 512 characters for enhanced security

- *** ID: 512-char hex string (256 bytes of secure random data) - OTK ID: 64-char hex string (32 bytes - unchanged) - Updated generateSecureHexString() to accep...

snadjafinia·Oct 14, 2025

OtherSecurityService

Implement new *** session model with 64-char GUID

- Add KSessionService for simplified session management - *** ID is now a 64-char hex string (not encoded KToken) - Redis key format: ***<64-char-guid> - Redis ...

snadjafinia·Oct 14, 2025

RefactorSecurityService

Use session cookies instead of persistent cookies with maxAge

snadjafinia·Oct 14, 2025

FixSecurityService

Add usernameAlias, memberEmail, and countryAbbreviation to user-info endpoint

snadjafinia·Oct 14, 2025

FixSecurityService

Remove cookie domain attribute for proper per-subdomain cookie setting

snadjafinia·Oct 14, 2025

FixSecurityService

Update session naming - use *** cookie and SESSION<guid> Redis keys per SSO specification

snadjafinia·Oct 14, 2025

CISecurityService

Trigger rebuild with updated Redis config from shared library

snadjafinia·Oct 14, 2025

October 13, 2025

RefactorSecurityService

Use shared library Redis configuration instead of local config

snadjafinia·Oct 13, 2025

FeatureSecurityService

Implement Redis read/write splitting - writes to master (10.8.0.1), reads from replica

snadjafinia·Oct 13, 2025

CISecurityService

Rebuild with corrected shared library (the_right column)

snadjafinia·Oct 13, 2025

CISecurityService

Trigger pipeline

snadjafinia·Oct 13, 2025

CISecurityService

Trigger rebuild with latest shared library (MemberRightsApplied column name fix)

snadjafinia·Oct 13, 2025

CISecurityService

Trigger pipeline

snadjafinia·Oct 13, 2025

OtherSecurityService

Trigger rebuild with latest kamo-shared-library

snadjafinia·Oct 13, 2025

OtherSecurityService

Standardize password encoder config across all environments - Set pepper to **************** and iterations to 310000 in both local (application.yml) and k8s (configmap.yaml) configs to ensure consistency with KamoInitializerService

snadjafinia·Oct 13, 2025

OtherSecurityService

Update password pepper to match KamoInitializerService - Set pepper to 'f09kf32j0sdfsdfd' to ensure password hashing consistency across services

snadjafinia·Oct 13, 2025

FixSecurityService

Match password encoder settings with KamoInitializerService - Changed pepper to empty string and iterations to 310000 to match how passwords were originally created. Removed insecure hash generator endpoint.

snadjafinia·Oct 13, 2025

OtherSecurityService

Password hash generator endpoint for testing/admin - POST **************** to create proper PBKDF2 hashes

snadjafinia·Oct 13, 2025

OtherSecurityService

Provide specific error messages for account validation failures - Users now see exact reason **************** instead of generic message

snadjafinia·Oct 13, 2025

FixSecurityService

Remove non-existent u.is_active column from SQL query - The code only uses is_active from members table, not users table

snadjafinia·Oct 13, 2025

FixSecurityService

Read domain from X-Forwarded-Host header set by APIService gateway - This allows proper organization resolution when requests are proxied through APIService

snadjafinia·Oct 13, 2025

OtherSecurityService

Update workflow to use kamowssecurity-deployment instead of securityservice-deployment

kamo·Oct 13, 2025

OtherSecurityService

Rename SecurityService deployment from securityservice-deployment to kamowssecurity-deployment

kamo·Oct 13, 2025

October 12, 2025

OtherSecurityService

Disable Vault and add required parameters to prevent config validation errors

kamo·Oct 12, 2025

OtherSecurityService

Fix Redis SSL configuration in k8s ConfigMap - add ssl.enabled property to prevent boolean conversion error

kamo·Oct 12, 2025

OtherSecurityService

Fix Redis SSL configuration in k8s ConfigMap - change from boolean to object with enabled property

kamo·Oct 12, 2025

OtherSecurityService

Fix Redis SSL configuration - change from boolean to object with enabled property

kamo·Oct 12, 2025

OtherSecurityService

Fix Redis configuration

- Remove SSL configuration (was causing type conversion error) - Remove password requirement for local redis-slave service - Set host to **************** (local...

kamo·Oct 12, 2025

OtherSecurityService

Trigger workflow with corrected database configuration

kamo·Oct 12, 2025

OtherSecurityService

Fix database connection settings

- Update database URL to connect to 10.8.0.1:3306 directly - Change username from root to kamo - Update secret reference from root-password to DB_PASSWORD - Rem...

kamo·Oct 12, 2025

Je, unaona nini kuhusu usafiri?

Kila kitu kinaingia kwenye tovuti yako mwenyewe. Anza kwenye mpango wa bure na usome ukurasa huu tena katika mwezi mmoja.

Kuwa Huru Milele Mtazamo wa bei