Dan Milne cd862c7cd7 Filter code params from logs (TOTP, backup, OAuth code, PKCE) ...

The TOTP and backup-code form field is named `code`, which was not covered by
the filter list, so live one-time codes landed in production logs. Adding :code
(partial match) also redacts the OAuth authorization `code` and PKCE
`code_verifier`/`code_challenge`.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

2026-06-11 20:21:41 +10:00

..

environments

Anchor host-authorization regex to prevent look-alike domain bypass

2026-06-11 19:47:35 +10:00

initializers

Filter code params from logs (TOTP, backup, OAuth code, PKCE)

2026-06-11 20:21:41 +10:00

locales

First commit

2025-10-23 16:19:56 +11:00

application.rb

StandardRB fixes

2026-01-01 13:29:44 +11:00

boot.rb

First commit

2025-10-23 16:19:56 +11:00

bundler-audit.yml

First commit

2025-10-23 16:19:56 +11:00

cable.yml

User registation working. Sidebar built. Dashboard built. TOTP enable works - TOTP login works

2025-10-23 18:07:27 +11:00

cache.yml

User registation working. Sidebar built. Dashboard built. TOTP enable works - TOTP login works

2025-10-23 18:07:27 +11:00

ci.rb

First commit

2025-10-23 16:19:56 +11:00

database.yml

User registation working. Sidebar built. Dashboard built. TOTP enable works - TOTP login works

2025-10-23 18:07:27 +11:00

deploy.yml

Run SolidQueue supervisor inside Puma in production

2026-05-02 23:51:37 +10:00

environment.rb

First commit

2025-10-23 16:19:56 +11:00

importmap.rb

First commit

2025-10-23 16:19:56 +11:00

puma.rb

Run SolidQueue supervisor inside Puma in production

2026-05-02 23:51:37 +10:00

queue.yml

First commit

2025-10-23 16:19:56 +11:00

recurring.yml

Add OIDC fixes, add prefered_username, add application-user claims

2025-11-25 16:29:40 +11:00

routes.rb

Apps index access column + summary + admin access checker

2026-06-07 18:38:56 +10:00

storage.yml

Add a subdirectory for active storage

2025-11-27 19:12:09 +11:00