mantimon-tcg/backend
Cal Corum 3ec670753b Fix security and validation issues from code review
Critical fixes:
- Add admin API key authentication for admin endpoints
- Add race condition protection via unique partial index for starter decks
- Make starter deck selection atomic with combined method

Moderate fixes:
- Fix DI pattern violation in validate_deck_endpoint
- Add card ID format validation (regex pattern)
- Add card quantity validation (1-99 range)
- Fix exception chaining with from None (B904)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-28 14:16:07 -06:00
..
app Fix security and validation issues from code review 2026-01-28 14:16:07 -06:00
data Simplify card image URLs to use set-based paths 2026-01-27 16:16:51 -06:00
project_plans Phase 3: Collections + Decks - Services and DI architecture 2026-01-28 11:27:14 -06:00
references Add engine validation script with attack_coin_status effect handler 2026-01-28 00:15:12 -06:00
scripts Simplify card image URLs to use set-based paths 2026-01-27 16:16:51 -06:00
tests Fix security and validation issues from code review 2026-01-28 14:16:07 -06:00
.env.example Add database infrastructure with SQLAlchemy models and test suite 2026-01-27 10:17:30 -06:00
.gitignore Add backend foundation with uv, Black, and pre-commit hooks 2026-01-24 00:12:33 -06:00
.python-version Add backend foundation with uv, Black, and pre-commit hooks 2026-01-24 00:12:33 -06:00
alembic.ini Add database infrastructure with SQLAlchemy models and test suite 2026-01-27 10:17:30 -06:00
CLAUDE.md Fix security and validation issues from code review 2026-01-28 14:16:07 -06:00
docker-compose.yml Implement Phase 2: Authentication system 2026-01-27 21:49:59 -06:00
PROJECT_PLAN_MASTER.json Phase 3: Collections + Decks - Services and DI architecture 2026-01-28 11:27:14 -06:00
pyproject.toml Implement Phase 2: Authentication system 2026-01-27 21:49:59 -06:00
uv.lock Implement Phase 2: Authentication system 2026-01-27 21:49:59 -06:00