3 commits

Author	SHA1	Message	Date
Decobus	450b6d6044	Refactor build workflow by removing unnecessary dependency installation step and add new SaT configuration file with scene and source definitions	2025-07-20 13:18:12 -04:00
Decobus	6467cdee3c	Allow internal network access without API key ... - Skip API key authentication for localhost and local network IPs - Maintain security for external access while preserving usability - Log internal network access for transparency - Supports localhost, 127.0.0.1, and 192.168.x.x ranges 🤖 Generated with [Claude Code](https://claude.ai/code) Co-Authored-By: Claude <noreply@anthropic.com>	2025-07-19 05:02:12 -04:00
Decobus	afc6f5f3a8	Implement comprehensive security fixes for API protection ... - Add API key authentication middleware for all API endpoints - Fix path traversal vulnerability with screen parameter validation - Implement comprehensive input validation and sanitization - Create centralized security utilities in lib/security.ts - Add input validation for all stream and screen API endpoints - Prevent SQL injection with proper parameter validation - Add URL validation and string sanitization - Update documentation with security setup instructions - Pass all TypeScript type checks and ESLint validation Security improvements address critical vulnerabilities: - Authentication: Protect all API endpoints with API key - Path traversal: Validate screen names against allowlist - Input validation: Comprehensive validation with error details - XSS prevention: String sanitization and length limits 🤖 Generated with [Claude Code](https://claude.ai/code) Co-Authored-By: Claude <noreply@anthropic.com>	2025-07-19 04:57:54 -04:00