feat(config): validate clients and scope security

2026-09-14 01:07:46 +02:00
parent 5b0c623a8d
commit a3cee2756c
17 changed files with 230 additions and 437 deletions
@@ -0,0 +1,6 @@
+# Cryptography and secrets security
+
+* Never implement custom cryptographic primitives or use obsolete algorithms.
+* Use established libraries, authenticated encryption, secure randomness, and verified signatures and certificates.
+* Treat tokens, private keys, connection strings, and credentials as secrets; keep them out of source, URLs, command lines, logs, fixtures, and frontend code.
+* Use environment-appropriate secret storage, separate environments, and rotate compromised credentials.