Chever John 24c449ecae

security: remove hardcoded credentials and add WebSocket auth/CORS ...

- Clear default passwords in all service configs, require env vars
- Add JWT auth + role middleware to WebSocket endpoints
- Add origin whitelist to WebSocket upgrader (CORS protection)
- Fix goroutine leak in WS proxy (double errCh read)
- Update docker-compose to require secrets via ${VAR:?...} syntax
- Mark deprecated k8s configmap passwords as REPLACE_AT_DEPLOY_TIME

Co-Authored-By: Claude <noreply@anthropic.com>

2026-06-17 23:16:17 +08:00

auth-service

security: remove hardcoded credentials and add WebSocket auth/CORS

2026-06-17 23:16:17 +08:00

docs

init: iloom WMS monorepo with K8s deployment manifests

2026-06-14 11:33:31 +08:00

gateway

security: remove hardcoded credentials and add WebSocket auth/CORS

2026-06-17 23:16:17 +08:00

iloom-flatten @ 3093ae18c2

init: iloom WMS monorepo with K8s deployment manifests

2026-06-14 11:33:31 +08:00

k8s

security: remove hardcoded credentials and add WebSocket auth/CORS

2026-06-17 23:16:17 +08:00

purchaser-service

security: remove hardcoded credentials and add WebSocket auth/CORS

2026-06-17 23:16:17 +08:00

scripts

init: iloom WMS monorepo with K8s deployment manifests

2026-06-14 11:33:31 +08:00

shared

init: iloom WMS monorepo with K8s deployment manifests

2026-06-14 11:33:31 +08:00

textile-service

security: remove hardcoded credentials and add WebSocket auth/CORS

2026-06-17 23:16:17 +08:00

washing-service

security: remove hardcoded credentials and add WebSocket auth/CORS

2026-06-17 23:16:17 +08:00

.dockerignore

init: iloom WMS monorepo with K8s deployment manifests

2026-06-14 11:33:31 +08:00

.env.example

security: remove hardcoded credentials and add WebSocket auth/CORS

2026-06-17 23:16:17 +08:00

.gitignore

init: iloom WMS monorepo with K8s deployment manifests

2026-06-14 11:33:31 +08:00

.gitlab-ci.yml

fix(ci): use host networking and custom DNS for DinD builds

2026-06-17 10:28:16 +08:00

.gitmodules

init: iloom WMS monorepo with K8s deployment manifests

2026-06-14 11:33:31 +08:00

docker-compose.integrated.yml

security: remove hardcoded credentials and add WebSocket auth/CORS

2026-06-17 23:16:17 +08:00

docker-compose.yml

security: remove hardcoded credentials and add WebSocket auth/CORS

2026-06-17 23:16:17 +08:00

go.work

init: iloom WMS monorepo with K8s deployment manifests

2026-06-14 11:33:31 +08:00

go.work.sum

init: iloom WMS monorepo with K8s deployment manifests

2026-06-14 11:33:31 +08:00

Makefile

init: iloom WMS monorepo with K8s deployment manifests

2026-06-14 11:33:31 +08:00

Description

No description provided

215 KiB

Languages

Go 96.3%

Shell 1.6%

Dockerfile 1.2%

Makefile 0.9%