-
Notifications
You must be signed in to change notification settings - Fork 108
All issues
Issue creation is restricted in this repository
Issues
is:issue state:open
is:issue state:open
Search results
Add timestamp-based expiration to admin API requests
Stellar WaveIssues in the Stellar wave programIssues in the Stellar wave programStatus: Open.#545 In Heliobond/backend;Add structured audit logging for all admin actions
Stellar WaveIssues in the Stellar wave programIssues in the Stellar wave programStatus: Open.#542 In Heliobond/backend;Add retry logic with exponential backoff for Stellar RPC errors
Stellar WaveIssues in the Stellar wave programIssues in the Stellar wave programStatus: Open.#541 In Heliobond/backend;Prevent Stellar transaction replay with sequence number guard
Stellar WaveIssues in the Stellar wave programIssues in the Stellar wave programStatus: Open.#540 In Heliobond/backend;Pin exact dependency versions for critical packages
Stellar WaveIssues in the Stellar wave programIssues in the Stellar wave programStatus: Open.#537 In Heliobond/backend;Indexer polls client.getTransaction() with a ledger sequence number instead of a transaction hash
Stellar WaveIssues in the Stellar wave programIssues in the Stellar wave programStatus: Open.#534 In Heliobond/backend;Tx-queue retry cron dequeues items before confirming success, silently dropping failed retries after one attempt
Stellar WaveIssues in the Stellar wave programIssues in the Stellar wave programStatus: Open.#532 In Heliobond/backend;runHourlyScoreUpdate records score history and fires webhooks twice for every successful update
Stellar WaveIssues in the Stellar wave programIssues in the Stellar wave programStatus: Open.#531 In Heliobond/backend;Rate limiting keys on req.ip with no trust-proxy configuration — collapses to a single bucket behind a reverse proxy
Stellar WaveIssues in the Stellar wave programIssues in the Stellar wave programStatus: Open.#528 In Heliobond/backend;Admin-key comparison uses plain === instead of the codebase's own timing-safe compare, duplicated in two files
Stellar WaveIssues in the Stellar wave programIssues in the Stellar wave programStatus: Open.#526 In Heliobond/backend;validateApiKey() compares API keys with plain === instead of a timing-safe comparison
Stellar WaveIssues in the Stellar wave programIssues in the Stellar wave programStatus: Open.#525 In Heliobond/backend;computeScoresWithFormula() divides by solar.max_power_kw with no zero-guard, unlike its sibling computeScores()
Stellar WaveIssues in the Stellar wave programIssues in the Stellar wave programStatus: Open.#523 In Heliobond/backend;