Yusuf Suleman fb79f15f75 fix(fitness): eliminate cross-user data access (#4) ...

- All user_id query params now enforced to authenticated user's own ID
- /api/users restricted to return only current user (no user enumeration)
- Wildcard CORS headers removed (service is internal-only via gateway)
- Covers: entries, totals, goals, templates, favorites, goal setting

Closes #4

2026-03-29 08:53:04 -05:00

.claude

Initial commit: Second Brain Platform

2026-03-28 23:20:40 -05:00

docs

Initial commit: Second Brain Platform

2026-03-28 23:20:40 -05:00

frontend-v2

fix: security hardening across platform

2026-03-29 08:25:50 -05:00

gateway

fix: security hardening across platform

2026-03-29 08:25:50 -05:00

packages

Initial commit: Second Brain Platform

2026-03-28 23:20:40 -05:00

services

fix(fitness): eliminate cross-user data access (#4)

2026-03-29 08:53:04 -05:00

.env.example

Initial commit: Second Brain Platform

2026-03-28 23:20:40 -05:00

.gitignore

fix: security hardening across platform

2026-03-29 08:25:50 -05:00

claude_remediation_prompt.txt

fix(trips): enforce password protection on shared trips (#3)

2026-03-29 08:50:45 -05:00

docker-compose.yml

Initial commit: Second Brain Platform

2026-03-28 23:20:40 -05:00

package-lock.json

Initial commit: Second Brain Platform

2026-03-28 23:20:40 -05:00

package.json

Initial commit: Second Brain Platform

2026-03-28 23:20:40 -05:00

Description

Second Brain Platform - Dashboard, Fitness, Budget, Inventory, Trips, Reader, Media

778 KiB

Languages

Svelte 54.4%

Python 31.6%

JavaScript 10.6%

TypeScript 2%

CSS 1.1%

Other 0.2%