Jinwoo-H c8ecd7830a fix(push): close the final security review findings in the gateway and infra (#8129) ...

- app.onError logs only the error name and answers a bare 500; hono's default
  handler printed the whole error, and a pg error carries the row in detail
- a second per-IP bucket (240/min) runs ahead of the bearer lookup on every
  authenticated route, so forged bearers cannot spend the two-connection pool
- one live session per host: minting deletes the host's earlier row
- device-less hosts are pruned after 1 h, not 30 d; any keypair mints one free
- notificationId is printable ASCII, since it becomes the APNs collapse header
- the impersonated FCM probe token is masked in the workflow log
- prevent_destroy on the Apple secrets and the orca_push database

2026-09-06 15:19:21 -04:00

..

src

fix(push): close the final security review findings in the gateway and infra (#8129)

2026-09-06 15:19:21 -04:00

Dockerfile

feat(cloud): add the mobile push gateway and its contract package (#8129)

2026-09-06 15:18:54 -04:00

package.json

feat(cloud): add the mobile push gateway and its contract package (#8129)

2026-09-06 15:18:54 -04:00

tsconfig.build.json

feat(cloud): add the mobile push gateway and its contract package (#8129)

2026-09-06 15:18:54 -04:00

tsconfig.json

feat(cloud): add the mobile push gateway and its contract package (#8129)

2026-09-06 15:18:54 -04:00

vitest.config.ts

feat(cloud): add the mobile push gateway and its contract package (#8129)

2026-09-06 15:18:54 -04:00