jwinterm 00e04c74bb security: harden admin auth, reconciler locking, and connection pooling ...

- Use secrets.compare_digest for timing-safe admin key comparison
- Strip whitespace from ADMIN_API_KEY env var
- Add PostgreSQL advisory locks per-invoice in reconciler to prevent
  duplicate processing during deployments
- Add wallet-RPC retry with backoff (3 attempts: 0.5s, 1s, 2s)
- Raise MAX_SUBADDRESS_INDEX from 100 to 300
- Tune DB connection pool (pool_size=20, max_overflow=10, recycle=3600)
- Add 1-hour admin session timeout
- Regenerate UI lockfile

2026-03-15 10:49:55 -04:00

..

__init__.py

Fork xmrcheckout for Wownero (WOW)

2026-03-09 11:08:55 -04:00

admin_routes.py

security: harden admin auth, reconciler locking, and connection pooling

2026-03-15 10:49:55 -04:00

btcpay_routes.py

Fork xmrcheckout for Wownero (WOW)

2026-03-09 11:08:55 -04:00

btcpay_schemas.py

Fork xmrcheckout for Wownero (WOW)

2026-03-09 11:08:55 -04:00

btcpay_webhooks.py

Fork xmrcheckout for Wownero (WOW)

2026-03-09 11:08:55 -04:00

config.py

security: harden admin auth, reconciler locking, and connection pooling

2026-03-15 10:49:55 -04:00

db.py

security: harden admin auth, reconciler locking, and connection pooling

2026-03-15 10:49:55 -04:00

formatting.py

Fork xmrcheckout for Wownero (WOW)

2026-03-09 11:08:55 -04:00

main.py

Add admin panel for merchant management

2026-03-10 11:25:02 -04:00

models.py

Fork xmrcheckout for Wownero (WOW)

2026-03-09 11:08:55 -04:00

monero_service.py

Fork xmrcheckout for Wownero (WOW)

2026-03-09 11:08:55 -04:00

qr_codes.py

Fork xmrcheckout for Wownero (WOW)

2026-03-09 11:08:55 -04:00

rates.py

Fork xmrcheckout for Wownero (WOW)

2026-03-09 11:08:55 -04:00

reconciler.py

security: harden admin auth, reconciler locking, and connection pooling

2026-03-15 10:49:55 -04:00

routes.py

fix: use correct Wownero network bytes and 2-byte varint prefix for address validation

2026-03-13 14:57:57 -04:00

schemas.py

Fork xmrcheckout for Wownero (WOW)

2026-03-09 11:08:55 -04:00

security.py

Fork xmrcheckout for Wownero (WOW)

2026-03-09 11:08:55 -04:00

subaddress_allocator.py

security: harden admin auth, reconciler locking, and connection pooling

2026-03-15 10:49:55 -04:00

subaddress_derivation.py

fix: use correct Wownero network bytes and 2-byte varint prefix for address validation

2026-03-13 14:57:57 -04:00

webhooks.py

Fork xmrcheckout for Wownero (WOW)

2026-03-09 11:08:55 -04:00