mantimon-tcg/backend/app/services
Cal Corum 3ec670753b Fix security and validation issues from code review
Critical fixes:
- Add admin API key authentication for admin endpoints
- Add race condition protection via unique partial index for starter decks
- Make starter deck selection atomic with combined method

Moderate fixes:
- Fix DI pattern violation in validate_deck_endpoint
- Add card ID format validation (regex pattern)
- Add card quantity validation (1-99 range)
- Fix exception chaining with from None (B904)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-28 14:16:07 -06:00
..
oauth Implement Phase 2: Authentication system 2026-01-27 21:49:59 -06:00
__init__.py Add CardService and card data conversion pipeline 2026-01-27 14:16:40 -06:00
card_service.py Add FastAPI lifespan hooks and fix Phase 1 gaps 2026-01-27 15:37:19 -06:00
collection_service.py Fix security and validation issues from code review 2026-01-28 14:16:07 -06:00
deck_service.py Fix security and validation issues from code review 2026-01-28 14:16:07 -06:00
deck_validator.py Fix security and validation issues from code review 2026-01-28 14:16:07 -06:00
game_state_manager.py Add FastAPI lifespan hooks and fix Phase 1 gaps 2026-01-27 15:37:19 -06:00
jwt_service.py Implement Phase 2: Authentication system 2026-01-27 21:49:59 -06:00
token_store.py Implement Phase 2: Authentication system 2026-01-27 21:49:59 -06:00
user_service.py Fix OAuth absolute URLs and add account linking endpoints 2026-01-27 22:06:22 -06:00