Close the penetration test findings still live on r10 - #311

Merged

AhmadRAbuhussein merged 12 commits into

releases/r10.0from

hamza/fix/pentest-findings

Sep 15, 2026

Commits on Sep 15, 2026

fix: land on the dashboard after signing in

hamzahalq
and
claude
committed
e7b062c
fix: put adapter fields above the mapper editor link

hamzahalq
and
claude
committed
6e572bb
fix: withhold adapter credentials from the subscription list

hamzahalq
and
claude
committed
5034570
fix: withhold the default vendor link from the pre-auth config

hamzahalq
and
claude
committed
ae1b0b4
feat: require a new password from the seeded admin

hamzahalq
and
claude
committed
7c71bb3
fix: remove the break-glass login

hamzahalq
and
claude
committed
c5af30c
fix: refuse the sample signing key, rate limit, and close the API docs

hamzahalq
and
claude
committed
f9499f8
test: cover the penetration test findings

hamzahalq
and
claude
committed
f4e9351
chore: pass a deployment-specific signing key on deploy

hamzahalq
and
claude
committed
e7a4f50
docs: say that the signing key must be your own, local checkouts included

hamzahalq
and
claude
committed
b7647b7
fix: end existing sessions when a password changes

hamzahalq
and
claude
committed
059cd5c
fix: test an unsupported format with one that is actually unsupported

hamzahalq
and
claude
committed
ff5d3b8