Files
flaskpaste/.gitignore
user e7c278be0d
Some checks failed
CI / Lint & Format (push) Failing after 29s
CI / Unit Tests (push) Has been skipped
CI / Memory Leak Check (push) Has been skipped
CI / Fuzz Testing (push) Has been skipped
CI / SBOM Generation (push) Has been skipped
CI / Security Scan (push) Successful in 34s
CI / Security Tests (push) Has been skipped
CI / Advanced Security Tests (push) Has been skipped
CI / Build & Push Image (push) Has been skipped
CI / Harbor Vulnerability Scan (push) Has been skipped
fix: share PoW HMAC secret across gunicorn workers
get_pow_secret() generated a random secret per process, so challenges
signed by worker A failed verification on worker B (~90% failure rate
with 2 workers).  Persist a file-backed secret to data/.pow_secret
using O_EXCL for atomic creation.  FLASKPASTE_POW_SECRET env var
still takes priority when configured.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-23 21:32:18 +01:00

52 lines
422 B
Plaintext

# Python
__pycache__/
*.py[cod]
*$py.class
*.so
.Python
venv/
ENV/
.venv/
# Testing
.pytest_cache/
.coverage
htmlcov/
.tox/
# IDE
.idea/
.vscode/
*.swp
*.swo
# Data
data/*.db
data/*.db-journal
data/*.db-wal
data/*.db-shm
# Secrets
.credentials
.credentials.json
*.pem
*.key
keys/
data/.pow_secret
# Build
dist/
build/
*.egg-info/
# OS
.DS_Store
Thumbs.db
# Private
.claude/
CLAUDE.md
CRUSH.md
PERSONAE
.hypothesis/