Reduce *** ID length from 512 to 128 characters
Changes: - ***_ID_LENGTH: 512 -> 128 (64 bytes of entropy) - Updated all documentation and comments - Updated logging to show full 128-char ID - OTK length rema...
Increase *** ID length to 512 characters for enhanced security
- *** ID: 512-char hex string (256 bytes of secure random data) - OTK ID: 64-char hex string (32 bytes - unchanged) - Updated generateSecureHexString() to accep...
Implement new *** session model with 64-char GUID
- Add KSessionService for simplified session management - *** ID is now a 64-char hex string (not encoded KToken) - Redis key format: ***<64-char-guid> - Redis ...
Use session cookies instead of persistent cookies with maxAge
Add usernameAlias, memberEmail, and countryAbbreviation to user-info endpoint
Remove cookie domain attribute for proper per-subdomain cookie setting
Update session naming - use *** cookie and SESSION<guid> Redis keys per SSO specification
Trigger rebuild with updated Redis config from shared library
Use shared library Redis configuration instead of local config
Implement Redis read/write splitting - writes to master (10.8.0.1), reads from replica
Trigger rebuild with latest shared library (MemberRightsApplied column name fix)
Update password pepper to match KamoInitializerService - Set pepper to 'f09kf32j0sdfsdfd' to ensure password hashing consistency across services
Password hash generator endpoint for testing/admin - POST **************** to create proper PBKDF2 hashes
Provide specific error messages for account validation failures - Users now see exact reason **************** instead of generic message
Remove non-existent u.is_active column from SQL query - The code only uses is_active from members table, not users table
Read domain from X-Forwarded-Host header set by APIService gateway - This allows proper organization resolution when requests are proxied through APIService
Update workflow to use kamowssecurity-deployment instead of securityservice-deployment
Rename SecurityService deployment from securityservice-deployment to kamowssecurity-deployment
Disable Vault and add required parameters to prevent config validation errors
Fix Redis SSL configuration in k8s ConfigMap - add ssl.enabled property to prevent boolean conversion error
Fix Redis SSL configuration in k8s ConfigMap - change from boolean to object with enabled property
Fix Redis SSL configuration - change from boolean to object with enabled property
Fix Redis configuration
- Remove SSL configuration (was causing type conversion error) - Remove password requirement for local redis-slave service - Set host to **************** (local...
Fix database connection settings
- Update database URL to connect to 10.8.0.1:3306 directly - Change username from root to kamo - Update secret reference from root-password to DB_PASSWORD - Rem...
Fix SecurityService deployment configuration
- Update ConfigMap with complete application.yml including database, Redis, and external service configs - Update Deployment to mount ConfigMap as application.y...
Fix Kubernetes deployment: remove missing secret references
- Updated k8s/ manifests to match deploy/k8s/base/ configuration - Removed references to non-existent mysql-auth and *** secrets - Simplified ConfigMap to basic...
Fix Kubernetes manifests: update from kamowebregister to securityservice
- Updated deployment.yaml: name, labels, container name, and port (8080) - Updated service.yaml: name, selector, and target port (8080) - Updated configmap.yaml...
Fix Docker build: resolve shared library dependency issue
- Modified Dockerfile to build shared library first in multi-stage build - Updated workflow to remove redundant Maven build steps - Fixed 'm2-repository not fou...
Like what you see shipping?
All of it arrives in your workspace on its own. Start on the free plan and read this page again in a month.