Stephen Minakian af52c33617 Add security fixes and deployment configuration ...

Security fixes:
- Remove hardcoded MongoDB credentials from server.js (fail fast in production)
- Add OAuth state parameter validation for CSRF protection
- Add input validation for unitCode parameter to prevent NoSQL injection
- Add isValidUnitCode helper function

Deployment:
- Update docker-compose.yml to use env_file and environment variables
- Create .env.example with all required configuration variables

2026-01-21 18:04:37 -07:00

..

activity.js

Add user activity logging system

2026-01-21 17:53:56 -07:00

auth.js

Add security fixes and deployment configuration

2026-01-21 18:04:37 -07:00